CVE-2006-2205

The audiowrite function in NetBSD 3.0 allows local users to cause a denial of service kernel crash by using the audiosetinfo ioctl to change the sample rate of an audio device...

db_owner permissions to give the webshell two point improvement - - the vulnerability warning-the black bar safety net

| the dbowner permissions to give the webshell two point improvement | ---|--- Reduce backup file size, the resulting executable webshell success rate improved a lot The use of a differential backup Adding a parameter WITH DIFFERENTIAL declare @a sysname,@s nvarchar4 0 0 0 select...

eRoomVuln.txt

/ $ An open security advisory 9 - eRoom v6. Vulnerabilities 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Remote $ This advisory and/or proof of concept code must not be used for commercial gain. Documentum eRoom...

ircd-hybrid.txt

Name : ircd-hybrid-7/ircd-ratbox low-bandwidth DoS Date : June 14th 2004 Author : Erik Sperling Johansen Severity : Medium This has been tested on most the ircd versions currently used on EFNet. Other ircds may be affected. Affected: ircd-hybrid =1.5.2 ircd-ratbox =2.0rc7 ircd-hybrid 6 csircd...

ircd-ratbox/ircd-hybrid message flood DoS

If sender type is unknown message rate limitation causes messages to be accumulated in memory...

ircd-hybrid-7 / ircd-ratbox low-bandwidth DoS

Name : ircd-hybrid-7/ircd-ratbox low-bandwidth DoS Date : June 14th 2004 Author : Erik Sperling Johansen [email protected] Severity : Medium This has been tested on most the ircd versions currently used on EFNet. Other ircds may be affected. Affected: ircd-hybrid =7.0.1 ircd-ratbox =1.5.1...

802.11b DoS exploit

While working to develop code for WIDZ that is equivalent to a standard Intrusion Detection system’s RESET or SHUN functionality, an effective 802.11b disruption of service attack has been discovered. I haven’t spotted any other postings so here we go…. FATA-jack - a modified version of the...

5861 IP Filtering issues

Product: Efficient Networks 5861 DSL Router http://www.efficient.com/ebz/5800.html Tested version: 5.3.80 Latest firmware Advisory date: 10/01/2003 Severity: Moderate Details When using the built in IP filtering to block incoming TCP SYN flags, a simple port scan to the WAN interface of the route...

XSS vulnerabilites in Pafiledb

INTRO Some of you may be familiar with Pafiledb provided by PHP arena. Well they just released a new version that fixed a problem with their counting of files. Along with that they said they fixed a possible security bug involving using Javascript as a search string. I checked it on my old versio...

CVE-2001-1388

CVE-2001-1388 affects iptables prior to 1.2.4. The vulnerability stems from an inaccuracy in converting rate limits specified on the command line, which could cause administrators to see mismatched traffic levels (more or less) than intended. The articles do not provide exploit details or confirm...

CVE-2001-1388

iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator...

PT-2001-2618 · Microsoft · Internet Security/Acceleration (Isa) Server 2000

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Security and Acceleration ISA Server 2000 Description: The issue allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. The vendor disputes this issue, stating that it requires high...

CVE-2001-1388

iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator...

PT-2000-1165 · Oracle · Iplanet Web Server

Name of the Vulnerable Software and Affected Versions: iPlanet Web Server version 4.1 Description: The issue allows remote attackers to cause a denial of service by sending a large number of GET commands, which consumes memory and causes a kernel panic. Recommendations: For iPlanet Web Server...

spank.txt

------------------------------------------------ Explanation of the 'spank' attack -- a new breed stream/raped ------------------------------------------------ By: lst [email protected] This is a tad different than the previous release. Stream/Raped mearly flooded the host with ack's or no flags a...

PT-1999-1399 · Alt N · Mdaemon

Name of the Vulnerable Software and Affected Versions: MDaemon version 2.7 Description: A denial of service issue exists due to a large number of connection attempts. Recommendations: For MDaemon version 2.7, consider implementing rate limiting on incoming connections to prevent excessive...