237 matches found
[DCA-0006] Baby ASP Web Server DoS
DCA-0006 Software - Baby ASP Server Vendor Product Description - This program was build as an alternative for Microsoft's IIS. The main goal was to design a simple web server with support for ASP. Setting up Baby ASP Web Server is very easy: copy the executable to a directory of your choice, set...
tomcat DoS
Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service CPU consumption via a large number of simultaneous requests to list a web directory that has a large number of files...
Race condition
Race condition in the NeatUpload ASP.NET component 1.2.11 through 1.2.16, 1.1.18 through 1.1.23, and trunk.379 through trunk.445 allows remote attackers to obtain other clients' HTTP responses via multiple simultaneous requests, which triggers multiple calls to HttpWorkerRequest.FlushResponse for...
CVE-2007-2197
Race condition in the NeatUpload ASP.NET component 1.2.11 through 1.2.16, 1.1.18 through 1.1.23, and trunk.379 through trunk.445 allows remote attackers to obtain other clients' HTTP responses via multiple simultaneous requests, which triggers multiple calls to HttpWorkerRequest.FlushResponse for...
CVE-2007-2165
The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module that checks authentication is the same as the module that retrieves authentication data, which might allow remote attackers to bypass authentication, as...
CVE-2007-2165
The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module that checks authentication is the same as the module that retrieves authentication data, which might allow remote attackers to bypass authentication, as...
CVE-2007-2165
The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module that checks authentication is the same as the module that retrieves authentication data, which might allow remote attackers to bypass authentication, as...
kernel -- information disclosure when using HTT
Problem description and impact When running on processors supporting Hyper-Threading Technology, it is possible for a malicious thread to monitor the execution of another thread. Information may be disclosed to local users, allowing in many cases for privilege escalation. For example, on a...
Eternal Lines Web Server 1.0 - Remote Denial of Service
Eternal Lines Web Server 1.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/12416/info Eternal Lines Web Server is reported prone to a remote denial of service vulnerability. It is reported that the issue presents itself when the web service handles 70 or more simultaneous...
Eternal Lines Web Server 1.0 - Remote Denial of Service
source: https://www.securityfocus.com/bid/12416/info Eternal Lines Web Server is reported prone to a remote denial of service vulnerability. It is reported that the issue presents itself when the web service handles 70 or more simultaneous connections from a remote host. A remote attacker may...
CVE-2004-1218
Remote Execute 2.30 allows remote attackers to cause a denial of service application crash by making 7 simultaneous connections...
CVE-2004-1218: Undefined Security Weakness
Remote Execute 2.30 allows remote attackers to cause a denial of service application crash by making 7 simultaneous connections...
BadBlue Webserver v2.5 Denial Of Service Vulnerability
GulfTech Security Research August, 18th 2004 Vendor : BadBlue URL : http://www.badblue.com Version : BadBlue Webserver v2.5 Risk : Denial of Service Description: Share photos, videos, music, and business files with friends and colleagues instantly. Tired of paying a service to share your files an...
Various DNS service implementations generate multiple simultaneous queries for the same resource record
Overview Various implementations of DNS services may allow multiple simultaneous queries for the same resource record, allowing an attacker to apply probabilistic techniques to improve their odds of successful DNS spoofing. Description Some implementations of DNS services contain a vulnerability...
Новая DoS атака - simultation close
Отправка FIN+ACK пакета в обе стороны соединения приводит к переходу обеих сторон в состояние CLOSE-WAIT с постоянным обменом ACK пакетами...
MiM Simultaneous close attack
Доброе время суток Учёный Кот! Глядя на убогий эксплоит mimsc.exe решили написать нечто похожее, коментарий одного из автора проекта: ---------------------------------------------------------------------------------------------- Данный эксплоит написан в поддержку security advisory MiM Simultaneo...