[immune advisory] Mulitple vulnerabilities found in BisonFTP

immune advisory Mulitple vulnerabilities found in BisonFTP ================================================================================ BisonFTP is a FTP daemon used on Microsoft Windows 9x/NT systems. - DESCRIPTION ---------------------------------------------------------------- I BisonFTP i...

ISC "dhcrelay" fails to limit hop count when malicious bootp packet is received

Overview A vulnerability in the Internet Software Consortium's "dhcrelay" makes it possible for a remote attacker to use dhcrelay to launch a denial-of-service attack against a victim dhcp server. Description The Internet Software Consortium ISC produces a "freely redistributable reference...

Security Update: [CSSA-2002-044.0] Linux: Preboot eXecution Environment (PXE) server denial-of-service attacks

To: [email protected] [email protected] [email protected] [email protected] SCO Security Advisory Subject: Linux: Preboot eXecution Environment PXE server denial-of-service attacks Advisory number: CSSA-2002-044.0 Issue date: 2002 November 11 Cross...

ISC BIND 8.3.x - OPT Record Large UDP Denial of Service

// source: https://www.securityfocus.com/bid/6161/info ISC BIND is vulnerable to a denial of service attack. When a DNS lookup is requested on a non-existant sub-domain of a valid domain and an OPT resource record with a large UDP payload is attached, the server may fail. / bindoptdos.c OPT DoS...

MS02-025: Exchange 2000 Exhaust CPU Resources (320436)

The remote host is running Exchange Server 2000. The remote version of this software contains a flaw that allows an attacker to cause a temporary denial of service. To do this, the attacker needs to send an email message with malformed attributes. CPU utilization will spike at 100% until the...

Microsoft Services for Unix 3.0 Interix SDK vulnerable to buffer overrun via RPC request containing improper parameter size check

Overview Microsoft Services for Unix 3.0 Interix SDK contains a remotely exploitable buffer overflow. Description Quoting from Microsoft's Services for Unix 3.0 homepage, "Windows Services for UNIX version 3.0 provides a full range of cross-platform services for integrating Windows into existing...

[UNIX] Flood ACK Packets Cause an IBM SecureWay Firewall to Hang

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

NSSI-2002-sygatepfw5: Sygate Personal Firewall IP Spoofing Vulnerability

NSSI-Research Labs Security Advisory http://www.nssolution.com Philippines / .ph "Maximum e-security" http://nssilabs.nssolution.com Sygate Personal Firewall 5.0 IP Spoofing Vulnerability Author: Abraham Lincoln Hao / SunNinja e-Mail: [email protected] / [email protected] Advisory Code:...

Important: Red Hat Security Advisory: : Updated openssl packages fix protocol parsing bugs

Updated OpenSSL packages are available for Red Hat Linux 6.2, 7, 7.1, 7.2, and 7.3. These updates fix multiple protocol parsing bugs which may be used in a denial of service DoS attack or cause SSL-enabled applications to crash. OpenSSL is a commercial-grade, full-featured, and open source toolki...

Important: Red Hat Security Advisory: bind security update

Version 9 of ISC BIND, prior to version 9.2.1, contained a denial of service DoS attack vulnerability. Various versions of the ISC BIND resolver libraries are vulnerable to a buffer overflow attack. ISC BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocol...

KaZaa v1.7.1 Denial of Service Attack

Submitted by : Josh [email protected], omega [email protected] on July 25th, 2002 Vulnerability : KaZaa Denial of Service Attack Tested On : KaZaa v1.7.1 Remote : Yes Fix : KaZaa v1.7.2 has been released and is a fix for the problem Big Thanks To : SooT for letting me crash your system a lot...

Unreal3.2-rus.b ircd DoS against users

It's possible to kick any user by selecting nickname different in 1 cyrillic character...

CVE-2002-0566

PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause a denial of service crash via an HTTP Authorization header without an authentication type...

Epic Games Unreal Tournament Server 436.0 - Denial of Service Amplifier

source: https://www.securityfocus.com/bid/5148/info Unreal Tournament is a game produced by Epic Games, available for Microsoft Windows and Linux. Network play is supported. A vulnerability has been reported in the server used for network play. It is possible to use an Unreal Tournament server as...

CVE-2002-0604

Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service crash via a large number of packets with malformed IP options...

Apache web servers fail to handle chunks with a negative size

Overview There is a remotely exploitable vulnerability in the way that Apache web servers or other web servers based on their source code handle data encoded in chunks. This vulnerability is present by default in configurations of Apache web server versions 1.2.2 and above, 1.3 through 1.3.24, an...

Microsoft Internet Explorer 56 - CSSText Bold Font Denial of Service

Microsoft Internet Explorer 56 - CSSText Bold Font Denial of Service source: https://www.securityfocus.com/bid/5027/info A problem with Microsoft Internet Explorer may make it possible to deny service to users of the browser. The problem is in the handling of certain types of stylesheet input. It...

AOL Instant Messenger vulnerable to denial-of-service attack via buddy list transfers

Overview America Online's Instant Messenger AIM contains a remotely exploitable buffer overflow vulnerability. Description AOL Instant Messenger is a program for communicating with other users over the Internet and is widely used. During a buddy list transfer, a buffer overflow may occur. It has...

Cisco CatOS Telnet Option Handling Overflow (CSCdw19195)

Some Cisco Catalyst switches, running certain CatOS based software releases, have a vulnerability wherein a buffer overflow in the telnet option handling can cause the telnet daemon to crash and result in a switch reload. This vulnerability can be exploited to initiate a denial of service DoS...

Apache Httpd < 2.0.37 : Apache Chunked encoding vulnerability

Malicious requests can cause various effects ranging from a relatively harmless increase in system resources through to denial of service attacks and in some cases the ability to execute arbitrary remote code...