ISC BIND 8.2.2-P6 vulnerable to DoS when processing SRV records, aka the "srv bug"

Overview There is a denial-of-service vulnerability in several versions of the Internet Software Consortium's ISC BIND software. This vulnerability is referred to by the ISC as the "srv bug" and affects ISC BIND versions 8.2 through 8.2.2-P6. Description This vulnerability can cause affected DNS...

Savant 3.0 web server vulnerability

Vendor Name: Savant Product: Savant 3.0 web server Discoverd by: Xatrix Url: www.xatrix.org 1. About software Savant web server has been written by Michael Lamont http://savant.sourceforge.com it is very configurable freeware http deamon for win95/98. It's current version is 3.0 2. Full Detail It...

Cisco IOS software vulnerable to DoS via HTTP request containing "%%"

Overview There is a denial-of-service vulnerability in several Cisco switch and router products which allows an attacker to force affected devices to crash and reboot. Description A vulnerability exists in multiple versions of Cisco's Internetworking Operating System IOS software which allows an...

Microsoft Indexing Service (Windows 2000/NT 4.0) - '.htw' Cross-Site Scripting

source: https://www.securityfocus.com/bid/1861/info A cross-site scripting vulnerability has been reported in Microsoft Indexing Services for Windows 2000/NT4 and its handling of the .htw extension. If a user inadvertantly opened a hostile link through a browser or HTML compliant e-mail client,...

Rover POP3 Server Username Remote Overflow

The remote pop3 server seems vulnerable to a buffer overflow when issued a very long user name 10,000 chars This may allow an attacker to execute arbitrary commands as root on the remote POP3 server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10206; scriptversion...

libtermcap_exploit.txt

Subject: local libtermcap exploit To: [email protected] Well, I wrote this a little while back. This is a serious bug, so people should be able to test their systems properly. All admins should definitely upgrade to the newest libtermcap. - sk8 of LS / Local exploit for suid root programs...

windows.arp.DoS.txt

Date: Mon, 12 Apr 1999 13:59:54 +0200 From: Joel Jacobson To: [email protected] Subject: ARP problem in Windows9X/NT Hello all bugtraqers! I've found a problem in Windows9X/NT's way of handeling ARP packets. If you flood a computer at your LAN with the packet below, it's user will be forced to...

TCP/IP IP Fragmentation Remote DoS (bonk)

It was possible to make the remote server crash using the 'bonk' attack. This is due to a design flaw in the remote operating system's TCP/IP implementation. An attacker may use this flaw to shut down this server, thus preventing the network from working properly. C Tenable Network Security, Inc...