Enterasys SSR8000 DoS

nmap scanning causes system to crash...

Multiple vendor implementations of file scanning utilities vulnerable to DoS via compressed file archive

Overview Several file scanning utilities, including some virus scanners, may fail and crash when scanning compressed file archives. Description Many file scanners will decompress compressed file archives in memory so their contents can be scanned. However, some of these scanners do not check if...

CVE-2002-0440

Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients...

Trend Micro Interscan VirusWall for Windows NT 3.52 - Space Gap Scan Bypass

source: https://www.securityfocus.com/bid/5259/info A vulnerability has been reported in certain VirusWall versions. Reportedly, it is possible to bypass the scanning mechanism of VirusWall by adding extraneous spaces in certain email HTTP header fields. A malicious email server may add extraneou...

Security Advisory: Scanning for SSH Can Cause a Crash

-----BEGIN PGP SIGNED MESSAGE----- Security Advisory: Scanning for SSH Can Cause a Crash Revision 1.0 For Public Release 2002 June 27 16:00 UTC 0000 - --------------------------------------------------------------------------- Summary ======= While fixing vulnerabilities mentioned in the Cisco...

Scanning for SSH Can Cause a Crash

...

Web Server Directory Enumeration

This plugin attempts to determine the presence of various common directories on the remote web server. By sending a request for a directory, the web server response code indicates if it is a valid directory or not. This plugin was written by H D Moore Changes by Tenable: - Revised plugin title...

CVE-2001-0896

The CVE-2001-0896 entry concerns Inetd on OpenServer 5.0.5. A remote attacker can trigger a denial of service (crash) by issuing a port scan (e.g., with nmap -PO). The connected records (CVE and NVD entries) confirm the affected product and the crash-inducing behavior but do not provide concrete ...

CVE-2002-0440

Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients...

Three possible DoS attacks against some IOS versions.

There are three possible unreported DoS conditions in certain versions of IOS I could get my hands on. 1. When scanning all 65535 ports from a single host using nmap full connect/half connect/null/fin/ack/xmas through a Cisco 2611 running C2600-IO3-M, Version 12.16.5the router crashes. Same appli...

Microsoft Windows - Local Users Information : Disabled Accounts

Using the supplied credentials, Nessus was able to list local user accounts that have been disabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10913; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Local User...

VirusWall HTTP proxy content scanning circumvention

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 FOR PUBLIC RELEASE - ------------------------------------------------------------------------ Inside Security GmbH Vulnerability Notification Revision 0.3 2002-03-10 - ------------------------------------------------------------------------ The latest...

Trend Micro Interscan VirusWall 3.53.6 - Content-Length Scan Bypass

Trend Micro Interscan VirusWall 3.53.6 - Content-Length Scan Bypass // source: https://www.securityfocus.com/bid/4265/info Trend Micro InterScan VirusWall is a high performance internet gateway virus scanning package. It is capable of scanning incoming content over HTTP, SMTP and FTP for viruses...

Trend Micro Interscan VirusWall 3.5/3.6 - Content-Length Scan Bypass

// source: https://www.securityfocus.com/bid/4265/info Trend Micro InterScan VirusWall is a high performance internet gateway virus scanning package. It is capable of scanning incoming content over HTTP, SMTP and FTP for viruses and malicious code. A vulnerability has been reported in some versio...

Various Vulnerabilities in Norton Anti-Virus 2002

Various Vulnerabilities in Norton Anti-Virus 2002 ++++++++++++++++++++++++++++++++++++ Scope ---------- Edvice recently tested NAV 2002's ability to detect viruses in incoming e-mail messages. NAV 2002 includes an Email protection feature that scans incoming and outgoing e-mails for viruses. The...

Security BugWare : Alcatel 4400 PBX hack

w w w . s e c u r i t y b u g w a r e . o r g A D V I S O R Y Playing around with ALCATEL 4400 PBX SYSTEM AFFECTED ================ Alcatel 4400 Pbx PROBLEM ======== A little audit of an Alcatel 4400 pbx leads us to some interesting bugs : default passwords, many root accesses, DoS, halt. If you...

Сканирование портов через cachemgr.cgi в squid (unauthorized access)

Можно пробовать подключаться к портам внутри закрытой сети...

cachemgr.cgi (squid 2.3STABLE4)

IP6 Concept: Squid cachemgr.cgi misconfiguration - IP6 Configuration error BID error class - IP6 Platform investigated: Linux Redhat 6.2 Squid 2.3STABLE4 Apache 1.3.12 - IP6 The problem... Due to a misconfiguration on Apache and Squid Is posible to use cachemgr.cgi shipped with Squid to scan...

IP ID could allow to scan a masquerade network.

Hello, I was working on a new implementation of the IPID scann also known has idle scan in the nmap man page or pixie-scan as i call it During my test I think I discover a new way to use this type of scan : Synopsis ------------- Using the gateway of a masquerade network as a witness relay host f...

FreeBSD-SA-01:61.squid

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:61 Security Advisory FreeBSD, Inc. Topic: Squid in accelerator-only mode ignores ACLs Category: ports Modules: squid22, squid23, squid24 Announced: 2001-10-08 Credits:...