Moderate: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

STUXNET Scanner to Identify Stuxnet Infected Machines !

TrendLabs has created a STUXNET Scanner Tool to help administrators with clues to determine which computers in their networks are still infected by STUXNET. This tool helps administrators identify infected machines within their own networks even if STUXNET is not communicating as STUXNET installs...

Cisco IOS Software TCP Denial of Service Vulnerability - Cisco Systems

Cisco IOS Software Release, 15.12T is affected by a denial of service DoS vulnerability during the TCP establishment phase. The vulnerability could cause embryonic TCP connections to remain in a SYNRCVD or SYNSENT state. Enough embryonic TCP connections in these states could consume system...

SEIL/X Series and SEIL/B1 IPv6 Unicast RPF vulnerability

Overview SEIL/X Series and SEIL/B1 contains a vulnerability in which IPv6 Unicast Reverse Path Forwarding RPF does not properly function in strict mode. SEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contains a vulnerability in which IPv6 Unicast Reverse Path Forwarding RPF does...

CVE-2010-2827

Cisco IOS Software 15.1(2)T contains a DoS vulnerability (CVE-2010-2827) where spoofed TCP packets can exhaust resources by leaving embryonic connections in SYN_RCVD/SYN_SENT states. Public advisories confirm no authentication is required and that exploitation can be done with spoofed traffic, po...

CVE-2010-0293

The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service memory consumption via spoofed 1 NTP or 2 cmdmon packets...

CVE-2009-3563

ntprequest.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service CPU and bandwidth consumption by using MODEPRIVATE to send a spoofed 1 request or 2 response packet that triggers a continuous exchange of MODEPRIVATE error responses between two NTP daemon...

DEBIAN-CVE-2009-3563

ntprequest.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service CPU and bandwidth consumption by using MODEPRIVATE to send a spoofed 1 request or 2 response packet that triggers a continuous exchange of MODEPRIVATE error responses between two NTP daemon...

ntpd: DoS with mode 7 packets (VU#568372)

ntprequest.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service CPU and bandwidth consumption by using MODEPRIVATE to send a spoofed 1 request or 2 response packet that triggers a continuous exchange of MODEPRIVATE error responses between two NTP daemon...

DSA-1948-1 ntp - denial of service

Bulletin has no description...

Ethereal 10.x AFP Protocol Dissector Remote Format String Exploit

No description provided by source. / etherealv0.10.: AFP remote format string exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xethereal-afp-fmt.c -o xethereal-afp-fmt ethereal homepage/url: http://www.ethereal.com syntax: ./xethereal-afp-fmt -spSrPanc -h host vulnerable...

CVE-2002-2336

Summary: CVE-2002-2336 affects Norton Personal Firewall 2002 4.0. When configured to automatically block attacks, it allows remote attackers to block IP addresses and cause a denial of service through spoofed packets. The available sources (NVD/Red Hat/Rapid CVE entries) describe the same behavio...

CVE-2002-2337

Kaspersky Anti-Hacker 1.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets...

CVE-2002-2336

Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets...

CVE-2002-2337

CVE-2002-2337 affects Kaspersky Anti-Hacker 1.0. When configured to automatically block attacks, the product allows remote attackers to block IP addresses and cause a denial of service via spoofed packets. The provided sources describe the affected product and impact but do not offer concrete rem...

CVE-2003-1527

BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets...

CVE-2003-1527

Affected software : BlackICE Defender 2.9.cap and Server Protection 3.5.cdf. Vulnerability : When configured to automatically block attacks, remote attackers can cause a denial of service by spoofed packets, blocking IP addresses. Root cause/impact : The described behavior enables DoS through spo...

Nortel IP Phone Flooding Denial of Service

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: IP Phone Vendor: Nortel Subject: IP Phone Flooding Denial of Service Risk: High Effect: Currently exploitable Author: Daniel Stirnimann daniel.stirnimann at csnc dot ch Date: October, 18th 2007 Introduction: ------------- A malicious user who...

EasyCafe 2.12.2 - Security Restriction Bypass

EasyCafe 2.12.2 - Security Restriction Bypass // source: https://www.securityfocus.com/bid/19401/info EasyCafe is prone to a vulnerability that lets attackers bypass security restrictions. This issue occurs because the application fails to prevent an attacker from gaining unauthorized access to a...

EasyCafe 2.1/2.2 - Security Restriction Bypass

// source: https://www.securityfocus.com/bid/19401/info EasyCafe is prone to a vulnerability that lets attackers bypass security restrictions. This issue occurs because the application fails to prevent an attacker from gaining unauthorized access to a client computer. An attacker can exploit this...