4196 matches found
ezbounce format string bug
Format string bug in "sessions" command...
CVE-2002-0364
CVE-2002-0364 describes a heap-based buffer overflow in IIS 4.0/5.0 when processing chunked-encoded HTR requests via the HTR ISAPI extension, allowing an attacker to execute arbitrary code with the privileges of the ISAPI process. The vulnerability stems from chunked encoding handling; impact inc...
[INetCop Security Advisory] Remote format string vulnerability in Tanne.
======================================== INetCop Security Advisory 2003-0x82-012 ======================================== Title: Remote format string vulnerability in Tanne. 0x01. Description About: tanne is a small, secure session-management solution for HTTP. It replaces common sessions with a...
CVE-2002-1942
Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been broken or closed early, which allows remote attackers to cause a denial of service crash via a large number of concurrent sessions...
CVE-2002-2266
NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service firewall session table consumption by establishing multiple half-open H.323 sessions, which are not cleaned up on garbage removal and do not time out for 36 hours...
CVE-2002-1747
Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB...
Multiple Buffer Overflow vulnerabilities in SteelArrow (#NISR19082002B)
NGSSoftware Insight Security Research Advisory Name: Multiple Remote Buffer Overruns TOMAHAWKS' STEELARROW Systems Affected: WinNT, Win2K Not tested on other platforms Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.tomahawk.com Author: Mark Litchfield...
CVE-2002-0234
NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trusted network to cause a denial of service resource exhaustion via a port scan to an external network, which consumes all available connections...
OpenBB 1.0.0 RC3 - Cross-Site Scripting
OpenBB 1.0.0 RC3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4824/info OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems. It has been reported that OpenBB is vulnerable to a cross-site...
CVE-2001-0994
Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input e.g., from a port scanner, which prevents others from logging into the device...
Проблемы в CDE с сохраненными сеансами xterm (privelege escalation)
No description provided...
ISSalert: ISS Security Advisory: Citrix MetaFrame Remote Denial of Service Vulnerability
TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...
CVE-2001-0345
Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions...
Microsoft Windows 2000 Telnet Service fails to enforce timeouts on idle telnet sessions
Overview The Microsoft Windows 2000 Telnet Service contains a denial-of-service vulnerability that allows remote attackers to disrupt the telnet service on affected servers. Description The Microsoft Windows 2000 Telnet Service contains a vulnerability that allows a remote attacker to place idle...
CVE-1999-1150
The CVE-1999-1150 entry concerns Livingston Portmaster routers running ComOS that use the same initial sequence number (ISN) for TCP connections. This reuse allows remote attackers to spoof TCP connections and hijack sessions, as described in the provided description. The vulnerability is rated C...
DoS против Marconi (multiple connections DoS)
Поддерживается ограниченное число одновременных telnet-сеансов без таймаута авторизации...
CVE-2001-0994
Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input e.g., from a port scanner, which prevents others from logging into the device...
CVE-2001-0345
Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions...
Remote Desktop DoS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote Desktop 3.0 and previous DoS Affected: Win95/95/ME running Mcafee Remote Desktop 3.0 and below Problem: possible for remote attacker to crash Remote Desktop session. in some cases crashing the remote desktop agent. Desc: Remote desktop agent...