Microsoft Windows Messenger Service - Denial of Service (MS03-043)

Microsoft Windows Messenger Service - Denial of Service MS03-043 / DoS Proof of Concept for MS03-043 - exploitation shouldn't be too hard. Launching it one or two times against the target should make the machine reboot. Tested against a Win2K SP4. "The vulnerability results because the Messenger...

MS Windows Messenger Service Denial of Service Exploit (MS03-043)

No description provided by source. / DoS Proof of Concept for MS03-043 - exploitation shouldn't be too hard. Launching it one or two times against the target should make the machine reboot. Tested against a Win2K SP4. "The vulnerability results because the Messenger Service does not properly...

Cisco CSS 11000 Series DoS

SYN flood causes device to reboot...

NetScreen Security Advisory 57739

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: NetScreen Advisory 57739 Date: 30 July 2003 Impact: Potential Denial of Service of Security Device Affected Products: NetScreen Firewall/VPN products running ScreenOS 4.0.1r1 through 4.0.1r6 and 4.0.3r1 and 4.0.3r2 Unaffected Products: NetScree...

Cisco Security Advisory: Denial-of-Service of TCP-based Services in CatOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Denial-of-Service of TCP-based Services in CatOS Revision 1.0 For Public Release 2003 July 09 at 16:00 UTC GMT - ------------------------------------------------------------------------- Summary ====== After receiving eight TC...

Desktop Orbiter Unpassworded Access Remote Reboot DoS

The remote host is running a Desktop Orbiter Satellite As this service is unpassworded, an attacker may connect to it to reboot the remote host or take administrative control over it. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11713; scriptversion"$Revision: 1.14...

D-Link DI-704P - Syslog.HTM Denial of Service

D-Link DI-704P - Syslog.HTM Denial of Service source: https://www.securityfocus.com/bid/7686/info D-Link DI-704P has been reported prone to a remote denial of service vulnerability. The issue presents itself in a D-Link web interface page. It has been reported that when excessive is data passed U...

D-Link DI-704P - Syslog.HTM Denial of Service

source: https://www.securityfocus.com/bid/7686/info D-Link DI-704P has been reported prone to a remote denial of service vulnerability. The issue presents itself in a D-Link web interface page. It has been reported that when excessive is data passed URI parameter in a request for the vulnerable...

Important: Red Hat Security Advisory: openssl security update

Updated OpenSSL packages are available that fix a potential timing-based attack and a modified Bleichenbacher attack. Updated 30 May 2003 Added missing i686 packages. OpenSSL is a commercial-grade, full-featured, open source toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport...

sa2003-01.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-01 Topic: Microsoft Windows XP Redirector Local Buffer Overflow Vulnerability Release Date: 2003-3-27 CVE CAN ID: CAN-2003-0004 Affected system: =================== - - Microsoft Windows XP - - Microsoft Windows XP SP1...

D-Link DI-614 wiresless router crash/reboots

A user of ours has reported that the D-Link DI-614+ Wireless router/firewall is vulnerable to several old, well known vulnerablities. The user was able to reproduce the problem multiple times with consistent results. Not having the equipment, we have NOT reproduced these ourselves, and would...

Mandrake usermode utilities unauthorized access

Any user can halt/reboot system and obtain root shell from console...

DoS attack on Windows 2000 Terminal Server

This one's short and simple.. Description ----------- Any user with sufficient permission to log on to a Windows 2000 Terminal Server via RDP or ICA and access its filesystem can reboot the server at will. Exploit ------- - Open SYSTEMROOTSYSTEM32MSGINA.DLL for exclusive access read lock. I used...

RAZOR advisory: Linux 2.2.xx /proc/<pid>/mem mmap() vulnerability

RAZOR advisory: Linux kernel 2.2.x /proc/pid/mem mmap vulnerability Issue Date : 12/17/2002 Contact : Michal Zalewski [email protected] CVE number : CAN-2002-1380 Topic: A locally exploitable system crash vulnerability is present in the Linux kernel, versions 2.2.x. The system is likely...

NetScreen Secure Command Shell (SCS) denial-of-service vulnerability

Overview The Secure Command Shell service on NetScreen firewall products contains a remotely exploitable denial-of-service vulnerability. Description Firewall products from NetScreen Technologies, Inc. include a Secure Shell version 1 SSHv1 implementation called Secure Command Shell SCS. The SCS...

Buffalo access point DoS

Incomplete HTTP GET request causes device to reboot...

Linksys WAP11 1.3/1.4 / D-Link DI-804 4.68/Dl-704 2.56 b5 - Embedded HTTP Server Denial of Service

source: https://www.securityfocus.com/bid/6090/info A denial of service vulnerability has been reported for several networking devices. The condition will be triggered when the embedded web server, used by the devices, receives an overly long HTTP header. An attacker can exploit this vulnerabilit...

Unauthorized HP Procurve reboot

It's possible to reboot device via http://IP ADDRESS/sw2/cgi/devicereset? URL without authorization...

Cisco VPN 3000 Series Concentrator Client - Authentication Denial of Service

// source: https://www.securityfocus.com/bid/5620/info Cisco VPN 3000 series concentrators are prone to a denial of service condition when receiving an overly long username string during authentication from a VPN client. Successful exploitation will cause the device to reload. / ISAKMP Cisco VPN...

Lucent Access Point 300/600/1500 IP Services Router - Long HTTP Request Denial of Service

source: https://www.securityfocus.com/bid/5333/info The Lucent Access Point series of routers support a web based administrative interface. An error has been reported in the embedded HTTP server. It has been reported that sending a HTTP request consisting of approximately 4000 characters of data...