Remote DoS attack in AnalogX SimpleServer WWW Version 1.05 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS attack in AnalogX SimpleServer WWW Version 1.05 Vulnerability USSR Advisory Code: USSR-2000045 Release Date: June 15, 2000 Systems Affected: AnalogX SimpleServer WWW Version 1.05 THE PROBLEM The Ussr Labs team has recently discovered a null...

Remote DoS attack in Real Networks Real Server (Strike #2) Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS attack in Real Networks Real Server Strike 2 Vulnerability USSR Advisory Code: USSR-2000043 Release Date: June 1, 2000 Systems Affected: Real Networks Real Server 7 Linuxc6 Real Networks Real Server 7 Solaris 2.6 Real Networks Real Server 7...

Advisory CA-2000-08

CERT Advisory CA-2000-08 Inconsistent Warning Messages in Netscape Navigator Original release date: May 26, 2000 Last Revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Netscape Navigator, up to and including Navigator 4.73, withou...

windows2k.iss

I found there is a security problem about shtml.exe that allows anyone to explore the local path of IIS web server. Tested on windows2000 server.shtml.exe is a program issued with Forntpage Extention server for viewing smart HTML file, If we install Frontpage on Windows2000 server, a directory...

RFP2K04.txt

---/ RFP2K04 /----------------------------/ rfp.labs / wiretrip /--------- Mining BlackICE with RFPickAxe Remote command execution on BlackICE ICECap stations ------------------------------------/ rain forest puppy / [email protected] Table of contents: -/ 1 / For the Black Hats -/ 2 / For the Whi...

Potential security problem with mtr

Hi. One of my users asked me to install mtr, most adequately described as a GUI:ed combination of traceroute and ping. I thought it looked cool, and had a closer look. In this mail follows a warning about a potential security problem with this program if installed as suggested. No exploit has bee...

Проблемы с SimpleServer

GET-запрос длинной 17 символов приводит к краху сервера...

gpm-root

Hi! I've sent report about the following security hole to the authors of gpm, but they seemed to ignore the problem. The problem applies to every gpm version known by me, for example 1.18.1 and 1.19.0. To exploit this problem, gpm-root must be running on a machine and the user needs both login to...

CVE-1999-0849

Denial of service in BIND named via maxdname...

IKE - Aggressive Mode Shared Secret Hash Leakage

IKE - Aggressive Mode Shared Secret Hash Leakage source: https://www.securityfocus.com/bid/7423/info When a VPN is configured to use a pre-shared master secret and a client attempts to negotiate keys in aggressive mode, a hash of the secret is transmitted across the network in clear-text. This ma...

Gauntlet_Firewall_Lockup.txt

Subject: Remotely Lock Up Gauntlet 5.0 To: [email protected] / Discovered and written by: - Reply to Network Associates: "Who's watching your network?" MSG.net "Who's watching the watchers?" This can be found online at http://www.msg.net/firewalls/tis/bland.c Description: If you know an I...

msie4-persistent-connect.txt

Date: Fri, 22 Jan 1999 14:15:32 -0600 From: Joel Moses To: [email protected] Subject: IE4 Persistent Connection Bug Hi, everyone. Working with MCI/WorldCom, we've identified a problem with IE 4 which may or may not have security implications, but is definately naughty behavior, in our opinions...

nt4+sp4.y2k.txt

Date: Tue, 23 Mar 1999 18:31:34 -0500 From: Ilya Slavin To: [email protected] Subject: NT Y2K issue post SP4 Those of you who are in the process of deploying SP4 or are planning to do so should be aware that a new Y2K problem was discovered in this service pack. Here's the scoop. I...

iis4.0.smtp.DoS.txt

Date: Tue, 16 Feb 1999 14:03:43 -0600 From: Bug Traqqer To: [email protected] Subject: Re: IIS 4.0 SMTPSVC vs. QMAIL To all- if you find this problem happening to you there are fixes on both product sides. Qmail has provided a patch for stray line feeds. It is available through the...

linuxconf.txt

Date: Sat, 22 Aug 1998 20:35:42 -0500 From: Alex Mottram Subject: Security concerns in linuxconf shipped w/RedHat 5.1 There exists a security / DOS problem with linuxconf-1.11.r11-rh3/i386 as upgraded from RedHat's FTP site. No other versions have been tested by me. Both the maintainer of linuxco...

qmail-DoS.txt

Date: Mon, 4 Jan 1999 00:04:09 -0500 From: Wietse Venema To: [email protected] Subject: Anonymous Qmail Denial of Service In recent postings, Daniel Bernstein expands on the insecurity of the Postfix world-writable directory for local mail submission. Of all the attacks possible with such a...

install.iss.txt

Date: Sat, 20 Feb 1999 20:59:23 -0500 From: Fyodor To: [email protected] Subject: ISS install.iss security hole Today I downloade the latest trial version of Internet Security Scanner for Linux version 5.3. The install program shell script requires that you be root, even if you want to install...

outlook.express.mailbox.dos.txt

Outlook Express Win98 bug Miquel van Smoorenburg [email protected] Tue, 11 May 1999 10:58:41 +0200 There is a bug in Outlook Express delivered with Windows '98, at least version 4.72.3110.1 4.01 SP1 and 4.72.3120.0 4.01 SP1 + oepatsp1 Windows '95 updated with MSIE 4.01 has Outlook Express...

nt.domain.DoS.txt

Date: Tue, 2 Mar 1999 16:43:10 -0600 From: Paul L Schmehl To: [email protected] Subject: NT Domain DoS and Security Exploit with SAMBA Server Near the end of November of last year, we notified the SAMBA team, NTBUGTRAQ and Microsoft of two problems with SAMBA in an NT domain. The...

chase.online.banking.txt

Date: Thu, 06 May 1999 12:40:08 GMT From: [email protected] Daniel Norton Subject: Security/privacy hole in Chase Online Banking Here's an excerpt from a letter I faxed to Chase Online Banking www.chase.com the other day. Not only have they not fixed the problem, they apparently didn't...