DoS против Marconi (multiple connections DoS)

Поддерживается ограниченное число одновременных telnet-сеансов без таймаута авторизации...

CVE-2001-0994

Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input e.g., from a port scanner, which prevents others from logging into the device...

CVE-2001-0345

Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions...

Remote Desktop DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote Desktop 3.0 and previous DoS Affected: Win95/95/ME running Mcafee Remote Desktop 3.0 and below Problem: possible for remote attacker to crash Remote Desktop session. in some cases crashing the remote desktop agent. Desc: Remote desktop agent...

Дырка в маршрутизаторах Cisco (Initial TCP sequence number)

Неслучайная генерация начального номер последовательности в TCP позволяет перехватывать TCP-Сеансы...

eEye Digital Security IRIS 1.0.1 / SpyNet CaptureNet 3.0.12 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1627/info IRIS from eEye Digital Security is a protocol analyzer geared towards network management, it is currently in BETA. This product was formerly known as SpyNet CaptureNet. Certain versions of the this software are vulnerable to a remotely triggered...

eEye Digital Security IRIS 1.0.1 SpyNet CaptureNet 3.0.12 - Remote Buffer Overflow

eEye Digital Security IRIS 1.0.1 SpyNet CaptureNet 3.0.12 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/1627/info IRIS from eEye Digital Security is a protocol analyzer geared towards network management, it is currently in BETA. This product was formerly known as SpyNet...

RedHat Linux 6.06.16.2 - pam_console Monitor Activity After Logout

RedHat Linux 6.06.16.2 - pamconsole Monitor Activity After Logout / source: https://www.securityfocus.com/bid/1176/info A vulnerability exists in the pamconsole PAM module, included as part of any Linux system running PAM. pamconsole exists to own certain devices to users logging in to the consol...

Проблемы с маскарадингом в Linux

анализируя ICMP-ответы при сканировании портов, отведенных под маскарадинг по-умолчанию 61000 - 65096 можно обнаружить и перехватить активные UDP-сеансы...

PT-2000-1199 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH affected versions not specified Description: The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. Recommendations: At the moment, the...

CVE-1999-0837

CVE-1999-0837 describes a denial-of-service in BIND caused by improperly closing TCP sessions via so_linger. The Red Hat entry and NVD confirm the issue; Nessus references indicate affected BIND versions and list remediation as upgrading to BIND 4.9.7-REL or 8.2.2-P5. The available documents do n...

CVE-1999-0428

CVE-1999-0428 affects OpenSSL and SSLeay, allowing remote attackers to reuse SSL sessions and bypass access controls. The OpenVAS NASL reference documents a vulnerability in OpenSSL = 0.9.8s as cited) to mitigate the vulnerability. If exploit details or affected product versions vary by entry, th...

CVE-2000-0034

Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."...

CVE-1999-0007

Information from SSL-encrypted sessions via PKCS 1...

CVE-1999-0202

The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands...

CVE-1999-0202

CVE-1999-0202 affects the GNU tar command when used in FTP sessions, enabling an attacker to execute arbitrary commands via the tar process. The connected records consistently describe this as a vulnerability in GNU tar in FTP contexts with potential for remote command execution; however, explici...

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number source: https://www.securityfocus.com/bid/670/info A vulnerability in the Linux kernel allows remote users to guess the initial sequence number of TCP sessions. This can be used to create spoofed TCP sessions bypassing some types of IP...

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number

source: https://www.securityfocus.com/bid/670/info A vulnerability in the Linux kernel allows remote users to guess the initial sequence number of TCP sessions. This can be used to create spoofed TCP sessions bypassing some types of IP based access controls. The function 'securetcpsequencenumber'...

tcp.md5.router.dos.txt

Date: Mon, 14 Jun 1999 14:29:54 -0400 From: Craig Metz To: [email protected] Subject: TCP MD5 option problem I was implementing the RFC 2385 "Protection of BGP Sessions via the TCP MD5 Signature Option" option in the OpenBSD stack. For those who don't know the significance of this option, it i...

CVE-1999-0202

The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands...