Cisco CatOS TCP-ACK Remote DoS (CSCec42751, CSCed45576, CSCed48590)

The remote switch is vulnerable to various flaws that could allow an attacker to disable this device remotely by doing a TCP-ACK denial of service attack. This vulnerability is documented with the CISCO bugs ID CSCec42751, CSCed45576 and CSCed48590. C Tenable Network Security include"compat.inc";...

CVE-2004-0525: Undefined Security Weakness

HP Integrated Lights-Out iLO 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service hang by accessing iLO using the TCP/IP reserved port zero...

CVE-2004-0504: Undefined Security Weakness

Ethereal 0.10.3 allows remote attackers to cause a denial of service crash via certain SIP messages between Hotsip servers and clients...

CVE-2004-0392: Undefined Security Weakness

racoon before 20040407b allows remote attackers to cause a denial of service infinite loop and dropped connections via an IKE message with a malformed Generic Payload Header containing invalid 1 "Security Association Next Payload" and 2 "RESERVED" fields...

CVE-2004-0367: Undefined Security Weakness

Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service crash via a zero-length Presentation protocol selector...

CVE-2004-0252: Undefined Security Weakness

TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service CPU consumption via an empty USER name...

CVE-2004-0255: Undefined Security Weakness

Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . dot and / slash characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow...

CVE-2004-0278: Undefined Security Weakness

Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service CPU consumption via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data...

CVE-2003-1032: Undefined Security Weakness

Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service crash via a malformed URL to the web server, possibly involving a buffer overflow...

CVE-2004-0060: Undefined Security Weakness

WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service crash via a large POST request...

CVE-2003-1013: NULL Pointer Dereference

The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service crash via a malformed Q.931, which triggers a null dereference...

Remote DoS in FreeRADIUS, all versions.

Application: FreeRADIUS, all versions http://www.freeradius.org Summary: A remote DoS, and possibly exploit, exists in all versions of the FreeRADIUS server. All users should upgrade to the latest version, as soon as it is officially release. For later announcements, see: http://www.freeradius.or...

CVE-2003-0824: Undefined Security Weakness

Unknown vulnerability in the SmartHTML interpreter shtml.dll in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service response failure via a certain request...

CVE-2003-0855: Undefined Security Weakness

Pan 0.13.3 and earlier allows remote attackers to cause a denial of service crash via a news post with a long author email address...

MS Windows (RPC2) Universal Exploit & DoS (RPC3) (MS03-039)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows RPC2 Universal Exploit & DoS RPC3 MS03-039 =========================================================== / Windows RPC2 Universal Exploit MS03-039 & Remote DoS RPC3 / / Mu...

CVE-2002-1568: Undefined Security Weakness

OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service crash via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENTMASTERKEY messages,...

savant31.txt

Release Date: 09/22/2003 TITLE ===== Savant Web Server - Remote DoS DESCRIPTION =========== "Savant is a full-featured open source / freeware web server designed to be run under any 32-bit version of Microsoft Windows including Windows 95, 98, ME, XP, NT, and 2000. Savant was designed to be easy ...

CVE-2003-0827: Undefined Security Weakness

The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service crash via a long packet to UDP port 523...

CVE-2003-0760: Undefined Security Weakness

Blubster 2.5 allows remote attackers to cause a denial of service crash via a flood of connections to UDP port 701...

CVE-2003-0176: Undefined Security Weakness

The Name Service Daemon nsd, when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service crash via a UDP port scan...