CVE-2001-0324

The vulnerability (CVE-2001-0324) affects Windows 98 and Windows 2000 Java clients. A Java applet can open a large number of UDP sockets, the underlying cause being excessive UDP socket creation, which prevents the host from establishing additional UDP connections and can lead to a crash. No expl...

Локальный DoS против Windows

Открытие большого числа datagram-сокетов в клиентском приложении приводит к невозможности работать с UDP Включая разрешение имен...

Windows client UDP exhaustion denial of service

Georgi Guninski security advisory 37, 2001 Windows client UDP exhaustion denial of service Systems affected: Windows 2000 Prof, Windows 98 probably other Windowses Risk: Low Date: 6 February 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may distribute it unmodified. Yo...

Microsoft Windows 982000 - UDP Socket Denial of Service

Microsoft Windows 982000 - UDP Socket Denial of Service source: https://www.securityfocus.com/bid/2340/info Microsoft Windows 2000 and 98 are subject to a denial of service condition. Receiving a maliciously crafted email or visiting a malicious web site could prevent Windows 2000 from DNS...

Microsoft Windows 98/2000 - UDP Socket Denial of Service

source: https://www.securityfocus.com/bid/2340/info Microsoft Windows 2000 and 98 are subject to a denial of service condition. Receiving a maliciously crafted email or visiting a malicious web site could prevent Windows 2000 from DNS resolution and Windows 98 from accepting any new TCP...

[SECURITY] Debian esound packages not affected by /tmp/.esd race condition

Package: esound Vulnerability: Race condition Debian-specific: no Vulnerable: no Linux-Mandrake has recently released a Security Advisory MDKSA-2000:051 covering a race condition in the esound. Debian is not affected by this bug; the bug is specific to the unix domain socket support, which was...

LBL Traceroute 1.4 a5 - Heap Corruption (3)

LBL Traceroute 1.4 a5 - Heap Corruption 3 // source: https://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw...

LBL Traceroute 1.4 a5 - Heap Corruption (2)

LBL Traceroute 1.4 a5 - Heap Corruption 2 // source: https://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw...

Sun JDK 1.1.x / Sun JRE 1.1.x - Listening Socket

source: https://www.securityfocus.com/bid/1545/info A set of flaws in multiple vendors' Java implementation allows a malicious applet to open a listening socket to accept network connections against the security policy. Java applications use the java.net.ServerSocket class to create a listening...

XFree86: libICE DoS

Hi, I've been sitting on this one for a while. SUMMARY ======= Due to inadequate bounds checking in libICE, a denial of service exists with any application using inet listening libICE for network services. Unfortunately, there is a fairly prominent user of libICE, namely gnome-session. The...

Gnome 1.0/1.1 / Group X 11.0 / XFree86 X11R6 3.3.x/4.0 - Denial of Service

// source: https://www.securityfocus.com/bid/1369/info A denial of service vulnerability exists in libICE, part of the X11 windowing system. Any libICE application which creates inet listening sockets can be remotely crashed. This is due to a bug in the handling of the SKIPSTRING macro. By...

CVE-2000-0227

The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmemmax parameter, which allows local users to cause a denial of service by requesting a large number of sockets...

CVE-2000-0227

The CVE-2000-0227 entry concerns the Linux 2.2.x kernel where the number of Unix domain sockets is not restricted by the wmem_max parameter. This allows a local attacker to cause a denial of service by requesting a large number of sockets. The linked sources confirm the affected platform and vuln...

DoS-атака через доменные сокеты UNIX в Linux

: Большой объем информации посланный с помощью sendto через сокет в /dev/log приводит к краху системы...

CVE-2000-0227

The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmemmax parameter, which allows local users to cause a denial of service by requesting a large number of sockets...

Linux Kernel 2.2.12/2.2.14/2.3.99 (RedHat 6.x) - Socket Denial of Service

/ source: https://www.securityfocus.com/bid/1072/info A denial of service exists in Linux kernels, as related to Unix domain sockets ignoring limits as set in /proc/sys/net/core/wmemmax. By creating successive Unix domain sockets, it is possible to cause a denial of service in some versions of th...

Linux Kernel 2.2.122.2.142.3.99 (RedHat 6.x) - Socket Denial of Service

Linux Kernel 2.2.122.2.142.3.99 RedHat 6.x - Socket Denial of Service / source: https://www.securityfocus.com/bid/1072/info A denial of service exists in Linux kernels, as related to Unix domain sockets ignoring limits as set in /proc/sys/net/core/wmemmax. By creating successive Unix domain...

PT-1999-1482 · Ibm · Ibm Websphere

Name of the Vulnerable Software and Affected Versions: IBM WebSphere affected versions not specified Description: The issue concerns the use of weak encryption by the IBM WebSphere ikeyman tool to store a password for a key database used in SSL connections. Recommendations: At the moment, there i...

ssh_exploit.txt

I recieved this email today and wanted to know if it is something to be of concern about. The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com SSH 1.2.27 vulnerable to a Denial of Service attack...

SSH.1.2.27.DOS.txt

SSH 1.2.27 DOS: o SSH has the option of setting up "authentication sockets", used to pass authentication keys securely. When this is used, a socket is created on both client and server machines; the socket created on the server uses an often easy to guess filename based on the PID... The creation...