Проблемы с LDAP в Windows 2000 (DoS, users discovery)

С помощью анонимного LDAP - запроса можно проверить существование пользователя. Многочисленные LDAP - запросы приводят к 100 загрузке сервера...

Raptor Firewall 4.05.06.0.x - Zero Length UDP Packet Resource Consumption

Raptor Firewall 4.05.06.0.x - Zero Length UDP Packet Resource Consumption source: https://www.securityfocus.com/bid/3509/info Raptor Firewall is a commercially available firewall implementation distributed by Symantec. A problem with the handling of UDP packets by the firewall has been discovered...

DoS против Cisco (TCP scan)

После сканирования маршрутизатор перегружается...

DoS против ColdFusion

Пользователь может вызвать предельную загрузку сервера путем обращения к определенным скриптам...

Possible Watchguard Firebox II DoS

Hi, i've recently played with the Watchguard Firebox II firewall and discovered a nasty behaviour. Launching a simple connect flooder against the ftp proxy of the firewall i haven't tested other services the port hangs and so do all other services also the watchguard remote administration daemon,...

Microsoft Windows Server 2000 - Remote CPU-overload

Microsoft Windows Server 2000 - Remote CPU-overload source: https://www.securityfocus.com/bid/1415/info Sending a stream of binary zeros to any one of a number of Windows 2000 ports can cause 100% CPU utilization. The ports that were found vulnerable include TCP ports 7, 9, 21, 23, 7778 and UDP...

Проблемы со службой обзора (Browser)

Служба обзора сети базируется на UDP и не поддерживает авторизации. В спецификации службы есть описания пакетов, кторые служат для остановки службы обзора. Таким образом можно остановить все обозреватели сети. Кроме того, можно вызвать перегрузку сети зарегестрировав чрезвычайно большой список...

Microsoft IIS 4.05.0 - Malformed File Extension Denial of Service

Microsoft IIS 4.05.0 - Malformed File Extension Denial of Service source: https://www.securityfocus.com/bid/1190/info Sending a specially crafted URL containing malformed file extension information to Microsoft IIS 4.0/5.0 will consume CPU usage until it reaches 100% which will halt the program's...

Lockdown vulnerability - All versions

Release Date: May 4, 2000 Systems Affected: All machines running Lockdown Corporation's Lockdown AntiTrojan program ALL VERSIONS. Tested under Windows98. Results may vary under different operating systems, but all are vulnerable to the same problem. THE PROBLEM Lockdowns main display textbox can...

DoS-атака через доменные сокеты UNIX в Linux

: Большой объем информации посланный с помощью sendto через сокет в /dev/log приводит к краху системы...

Gene6 G6 FTP Server 2.0 - Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/805/info The G6 FTP Server, by Gene6, is vulnerable to a buffer overflow attack. If 2000 characters are sent as the username or password, the software will use up all available memory and CPU time and bring the host to a halt. Source - 19624-1.zip Binary ...

yahoo-pager-chat-control.txt

Date: Mon, 4 Jan 1999 01:50:53 GMT From: anonymous To: [email protected] Subject: Yahoo Pager Flaw In Chat Control = Yahoo Pager Chat Flaw In Chat Control Yahoo's Pager is very sloppy.. Yahoo's Pager doesn't have message control.. therefore it does not have chat request control.. so this...

ms.smtp.DoS.txt

Date: Sun, 14 Mar 1999 20:49:30 -0600 From: Chris Adams To: [email protected] Subject: Microsoft's SMTP service broken/stupid Our mail servers came to a screeching halt today thanks to Microsoft. Our servers are still running sendmail 8.8 we've got custom stuff and are working on upgrading to...

browser.forkbomb.txt

Jim Paris http://home.jtan.com/jim/bugs/both/fork.html Repeated Browser Spawning New browser windows can be opened automatically with Javascript's window.open command. This page simply spawns a neverending supply of windows. This is similar to the Unix "while1fork;" attack. Any browser that...

process.tbl.attcks.txt

-------------------------------------------------------------- This story was printed from ZDNN, located at http://www.zdnet.com/zdnn. -------------------------------------------------------------- Major Unix flaw emerges By Randy Barrett, Inter@ctive Week Online March 1, 1999 9:30 AM PT URL:...

testtrack.passwd.dos.txt

Date: Mon, 8 Mar 1999 10:58:17 -0500 From: Fabien Royer To: [email protected] Subject: Password and DOS Vulnerability with Testrack bug tracking software TestTrack, a bug tracking software made by Seapine Software http://www.seapine.com has a number of security problems that allow ...