ICMP Domain Name Request

The remote host answered to an ICMP 'Domain Name Request' as defined in RFC 1788. Such a request is designed to obtain the DNS name of a host based on its IP. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: RFC 1788 http://www.dolda2000.com/fredrik/icmp-dn/...

Testing NAT-T RFC VPN Detection

Binary data 3313.prm...

Secure HyperText Transfer Protocol (S-HTTP) Detection

Detection of services supporting the Secure HyperText Transfer Protocol S-HTTP. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only nb: Vulnerabili...

IPSEC IKE check

The remote IPSEC server seems to have a problem negotiating bogus IKE requests. An attacker may use this flaw to disable your VPN remotely. OpenVAS Vulnerability Test $Id: ikecheck.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: IPSEC IKE check Authors: John Lampe Script audit and...

SMTP antivirus scanner DoS

This script sends the 42.zip recursive archive to the mail server. If there is an antivirus filter, it may start eating huge amounts of CPU or memory. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

Deprecated Secure HyperText Transfer Protocol (S-HTTP) Reporting

This web server supports the deprecated Secure HyperText Transfer Protocol S-HTTP, a cryptographic layer that was defined in 1999 by RFC 2660. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service

/------------------------------------------ ||------+ Snort thsum es 0 cero, por lo tanto, el primer Router por donde pase este paquete lo descartara por no tener una checksum valida. RFC 1072 - TCP Extensions for Long-Delay Paths 3.2- TCP SACK Option: ... Kind: 5 Length: Variable...

VoIP-Phones: Weakness in proccessing SIP-Notify-Messages

Tele-Consulting GmbH security | networking | training advisory 05/07/06 URL of this advisory: http://pentest.tele-consulting.com/advisories/050706voip-phones.txt Topic: Weakness in implemenation of proccessing SIP-Notify-Messages in VoIP-Phones. Summary: Due to ignoring the value of 'Call-ID' and...

CVE-2002-1775

Affected product: Symantec Norton AntiVirus (NAV) 2002. Issue: remote attackers can bypass the initial virus scan by using a non-RFC compliant MIME header, causing NAV to prematurely stop scanning. Root cause/impact: bypass of initial scan with partial impact on security posture; AutoProtect feat...

DNS Server UDP Query Limitation

A DNS server is running on this port but it only answers to UDP requests. This means that TCP requests are blocked by a firewall. This configuration is not RFC-compliant. Contrary to common belief, TCP transport is not restricted to zone transfers AXFR : - answers bigger than 512 bytes are always...

TCP TIMESTAMPS - Denial of Service

TCP TIMESTAMPS - Denial of Service / TCP does not adequately validate segments before updating timestamp value http://www.kb.cert.org/vuls/id/637934 RFC-1323 TCP Extensions for High Performance 4.2.1 defines how the PAWS algorithm should drop packets with invalid timestamp options: R1 If there is...

TCP TIMESTAMPS Denial of Service Exploit

Exploit for multiple platform in category dos / poc ======================================== TCP TIMESTAMPS Denial of Service Exploit ======================================== / TCP does not adequately validate segments before updating timestamp value http://www.kb.cert.org/vuls/id/637934 RFC-1323...

TCP TIMESTAMPS - Denial of Service

/ TCP does not adequately validate segments before updating timestamp value http://www.kb.cert.org/vuls/id/637934 RFC-1323 TCP Extensions for High Performance 4.2.1 defines how the PAWS algorithm should drop packets with invalid timestamp options: R1 If there is a Timestamps option in the arrivin...

TCP does not adequately validate segments before updating timestamp value

Overview Certain TCP implementations may allow a remote attacker to arbitrarily modify host timestamp values, leading to a denial-of-service condition. Description The Transmission Control Protocol TCP is defined in RFC 793 as a means to provide reliable host-to-host transmission between hosts in...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

Microsoft Windows Internet Protocol Validation Remote Code Execution Vulnerability

Description Microsoft Windows is reported prone to a remote code execution vulnerability. It is reported that the vulnerability manifests when an affected Microsoft platform receives and processes an especially malformed TCP/IP packet. Reports indicate that the immediate consequences of...

Multiple Vendor ICMP Implementation - Spoofed Source Quench Packet Denial of Service

Multiple Vendor ICMP Implementation - Spoofed Source Quench Packet Denial of Service source: https://www.securityfocus.com/bid/13124/info Multiple vendor implementations of TCP/IP Internet Control Message Protocol ICMP are reported prone to several denial-of-service attacks. ICMP is employed by...

HP-UX PHNE_26988 : HP-UX Running Advanced Server/9000 for HP-UX (AS/U) RFC-Netbios, Remote Denial of Service (DoS) (HPSBUX00198 SSRT071359 rev.2)

s700800 11.X RFC-NETBIOS cumulative patch Jun2002 : RFC-Netbios panics when it receives a malformed UDP packet on port 139. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE26988. The text itself is copyrigh...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

Opera may insecurely execute binary data encoded in a URI

Overview The Opera web browser fails to validate data encoded using the RFC 2397 scheme. A remote attacker may be able to execute arbitrary code on a vulnerable system. Description The Opera web browser fails to properly handle binary data encoded following the RFC 2397 specification for sending...