3677 matches found
CVE-2001-1244
Multiple TCP implementations could allow remote attackers to cause a denial of service bandwidth and CPU exhaustion by setting the maximum segment size MSS to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traff...
Netscreen: DMZ Network Receives Some "Denied" Traffic
Dear NetScreen Customer: This is an important NetScreen Security Advisory. ------------------------------------------------------------------------------- ------------------------------ DMZ Network Receives Some "Denied" Traffic...
eEye Iris the Network traffic analyser DoS
Hi there, There exists a vulnerability that will cause the iris network traffic analyser to hang. I have included an exploit, that will demonstrate the bug, the exploit will send a packet to the remote host, when the remote host opens the packet to examine it iris will quit, leaving an error...
eEye Digital Security IRIS 1.0.1 - GET Denial of Service
eEye Digital Security IRIS 1.0.1 - GET Denial of Service // source: https://www.securityfocus.com/bid/2278/info A maliciously-formed packet sent to Iris by a remote attacker, upon opening in the program for analysis by a user, will cause Iris to terminate. The crash is caused by an inability of...
eEye Digital Security IRIS 1.0.1 - GET Denial of Service
// source: https://www.securityfocus.com/bid/2278/info A maliciously-formed packet sent to Iris by a remote attacker, upon opening in the program for analysis by a user, will cause Iris to terminate. The crash is caused by an inability of Iris to handle packets with malformed values in its header...
CVE-2000-1173
Microsys CyberPatrol uses weak encryption trivial encoding for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information...
CVE-2000-1173
CVE-2000-1173 affects Microsys CyberPatrol. The vulnerability stems from weak encryption (trivial encoding) for credit card numbers and no encryption for other registration data, enabling network sniffing to obtain sensitive information. Public details in the provided documents indicate partial c...
CVE-2000-1173
Microsys CyberPatrol uses weak encryption trivial encoding for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information...
ssldump 0.9 b1 - Format String
ssldump 0.9 b1 - Format String source: https://www.securityfocus.com/bid/2096/info ssldump is a traffic analyzer for monitoring network traffic in real time. It is written and maintained by Eric Rescorla. A problem exists which could allow the arbitrary execution of code. The problem exists in th...
ssldump 0.9 b1 - Format String
source: https://www.securityfocus.com/bid/2096/info ssldump is a traffic analyzer for monitoring network traffic in real time. It is written and maintained by Eric Rescorla. A problem exists which could allow the arbitrary execution of code. The problem exists in the ssldump handling of format...
Security Bulletin (MS00-073)
Microsoft Security Bulletin MS00-073 - -------------------------------------- Patch Available for "Malformed IPX NMPI Packet" Vulnerability Originally posted: October 11, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows 95, Windows...
CVE-2000-0113
The CVE-2000-0113 entry concerns the SyGate Remote Management program where the administration service does not properly restrict access, allowing remote attackers to cause a denial of service or view network traffic statistics. Connected documents corroborate a remote controller component (SyGat...
CVE-2000-0113
The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics...
cabletron.ssr.dos.txt
Bindview Security Advisory -------- Cabletron SmartSwitch Router 8000 Firmware v2.x Issue date: November 24, 1999 Contact: Scott Blake Topic: Denial of Service Vulnerability in Cabletron's SmartSwitch Router SSR Overview: Cabletron's SSR is a Layers 2-4 routing and switching device with one of th...
linux_blind_tcp_spoof.txt
Subject: Linux blind TCP spoofing, act II + others To: [email protected] Hello, Thanks to libnids development, some features/bugs in Linux kernel were found. I notified kernel mantainers in May, but they didn't seem interested. 1. Blind TCP spoofing against 2.0.36/37 Let's label a Linux...
DUO-PSA-2015-002: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2015-002 Original Publication Date: 2015-04-06 Revision Date: 2015-04-13 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue in recent versions of Duo Mobile for iOS that could allow attackers to perform a...
