Microsoft refuses to fix a security bug in Windows 2000

Microsoft refuses to fix a security bug in Windows 2000 Eugene Kalinin Medical Informatics Laboratory Moscow, Russia Aug 16, 2000 Yesterday Microsoft refused to fix a security problem in Windows 2000 RPC service. The bug in RPC service allows an attacker to put a Windows 2000 server out of servic...

proxy.dos

HTTP Proxies Denial of Service by SectorX of XOR http://xorteam.cjb.net The theory ========== While browsing through my own http proxy code, i noticed an interesting coding mistake - the proxy did not perfrom timeout checking on the remote host the user was connecting to. since every time a user...

TelSrv Reveals Usernames & Passwords After DoS Attack

---------- Details ---------- Application: GAMSoft's TelSrv 1.5 could be more... I don't have time to check, nor do I have the other programs Problem Type: Denial of Service Attack - Reveals User Names & Passwords Author: Patrick Webster mailto:[email protected] Platform: Win95 could be more...

DoS против telnet в Windows 2000

Большое число случайных данных в порт telnet TCP/23 приводит к отказу службы...

Дырка в GPM

Пользователь может удалять любые файлы, кроме этого имеется возможность DoS-атак...

DoS против принтеров HP

FTp-команда quote AAAAAAAAAAA cr приводит к отказу принтера...

GAMSoft TelSrv 1.4/1.5 Username Overflow DoS

It is possible to crash the remote telnet server by sending a username that is 4550 characters or longer. A remote attacker could exploit this to crash the service, or potentially execute arbitrary code. This script was written by Prizm See the Nessus Scripts License for details Changes by Tenabl...

DoS против Netware

Большое число случайных данных или фрагментированные пакеты в порт TCP/40193 приводят к переполненению буфера...

Дырка в BitchX

Ошибка форматной строки в команде /invite и /ignore потенциально позволяет выполнение кода и может быть исопльзована для DoS-атаки...

coldfusion.dos.txt

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Allaire's ColdFusion ---------------------------------------------------------------------------- --------- FS Advisory ID: FS-060700-1-CFM Release Date: June 7, 2000 Product: ColdFusion Web Application Serv...

DoS против Real Server

При определенных HTTP-запросах сервер перестает функционировать...

NetWin DMail 2.72.8 - ETRN Buffer Overflow

NetWin DMail 2.72.8 - ETRN Buffer Overflow // source: https://www.securityfocus.com/bid/1297/info NetWin's DMail is an alternative mail-server solution for unix and NT servers. There is a buffer overflow vulnerability in the server daemon that could allow remote attackers to execute arbitrary...

Eterm 0.8.10 rxvt 2.6.1 PuTTY 0.48 X11R6 3.3.34.0 - Denial of Service

Eterm 0.8.10 rxvt 2.6.1 PuTTY 0.48 X11R6 3.3.34.0 - Denial of Service // source: https://www.securityfocus.com/bid/1298/info xterm is a popular X11-based terminal emulator. If VT control-characters are displayed in the xterm, they can be interpreted and used to cause a denial of service attack...

Eterm 0.8.10 / rxvt 2.6.1 / PuTTY 0.48 / X11R6 3.3.3/4.0 - Denial of Service

// source: https://www.securityfocus.com/bid/1298/info xterm is a popular X11-based terminal emulator. If VT control-characters are displayed in the xterm, they can be interpreted and used to cause a denial of service attack against the client and even the host running the client. What makes it...

DoS против EzBoard

HTTP-запрос типа http://pub4.ezboard.com/u.showPublicProfile приводит к зависанию сервера на неопределенное время...

DoS против Lockdown

Программа использует внутренний буфер для хранения диагностических сообщений. При переполнении буфера, которое может быть вызвано большим числом попыток соединения на порт, программа начинает запускать обльшое количество внешних приложений, приводя к утечке ресурсов...

Windows DoS code (jolt2.c) (fwd)

This is code for the new DoS discovered by Razor a few days ago. It forces cpu utilization to 100, making everything move really really slow. Tested against Win98, WinNT4/sp5,6, Win2K. An interesting side note is that minor changes to this packet cause NT4/Win2k maybe others, not tested memory us...

Check Point Software Firewall-1 4.0/1 4.1 - Fragmented Packets Denial of Service

// source: https://www.securityfocus.com/bid/1312/info By sending illegally fragmented packets directly to or routed through Check Point FireWall-1, it is possible to force the firewall to use 100% of available processor time logging these packets. The FireWall-1 rulebase cannot prevent this atta...

Дырки в Lotus Domino

Классическое переполнение буфера в SMTP-команде MAIL FROM: при буфере свыше 4Kb. Кроме того, в конфигурации по-умолчанию документы могут быть модифицированы через Web-сервер. Кроме того, возможна DoS атака против почтового сервера, при посылке письма с одного несуществующего адреса на другой...

DoS.cayman

Cayman 3220-H DSL Router DOS - Intro Simple DOS attack against Cayman 3220-H DSL Router. This message has been copied to Cayman. Description Large username or password strings sent to the Cayman HTTP admin interface restart the router. Router log will show "restart not in response to admin...