OpenBSD 2.x - Pending ARP Request Remote Denial of Service

// source: https://www.securityfocus.com/bid/1759/info OpenBSD is vulnerable to a remotely exploitable denial of service condition. The problem seems to be a lack of limits on the storage of pending arp requests, and a failure to handle the condition of too many. If an attacker somehow causes a...

OpenBSD 2.x - Pending ARP Request Remote Denial of Service

OpenBSD 2.x - Pending ARP Request Remote Denial of Service // source: https://www.securityfocus.com/bid/1759/info OpenBSD is vulnerable to a remotely exploitable denial of service condition. The problem seems to be a lack of limits on the storage of pending arp requests, and a failure to handle t...

Microsoft Windows NT 4.02000 - Spoofed LPC Request (MS00-003)

Microsoft Windows NT 4.02000 - Spoofed LPC Request MS00-003 source: https://www.securityfocus.com/bid/1753/info This vulnerability is a new variation of the NT LPC Privilege Escalation Vulnerabilty please see https://www.securityfocus.com/bid/934 for details reported on January 12, 2000 by...

Microsoft Windows NT 4.0/2000 - Spoofed LPC Request (MS00-003)

source: https://www.securityfocus.com/bid/1753/info This vulnerability is a new variation of the NT LPC Privilege Escalation Vulnerabilty please see https://www.securityfocus.com/bid/934 for details reported on January 12, 2000 by Bindview. The patch released by Microsoft...

Check Point Software Firewall-1 3.0/1.4.0/1.4.1 - Spoofed Source Denial of Service

// source: https://www.securityfocus.com/bid/1419/info If Checkpoint Firewall-1 receives a number of spoofed UDP packets with Source IP = Destination IP, the firewall and likely the machine hosting it crashes. NOTE: This vulnerability while being posted to Bugtraq is currently being denied as a...

Check Point Software Firewall-1 3.01.4.01.4.1 - Spoofed Source Denial of Service

Check Point Software Firewall-1 3.01.4.01.4.1 - Spoofed Source Denial of Service // source: https://www.securityfocus.com/bid/1419/info If Checkpoint Firewall-1 receives a number of spoofed UDP packets with Source IP = Destination IP, the firewall and likely the machine hosting it crashes. NOTE:...

CVE-2000-0070

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...

CVE-2000-0070: Undefined Security Weakness

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...

CVE-1999-0195: Undefined Security Weakness

Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1...

CVE-1999-0461: Undefined Security Weakness

Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address...

CVE-2000-0070

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...

RedHat 6.1 / IRIX 6.5.18 - 'lpd' Command Execution

source: https://www.securityfocus.com/bid/927/info Multiple vulnerabilities have been discovered in lpd, shipped with various Linux and Unix distributions. It has been reported that lpd fails to properly authenticate hostnames. This could allow an unauthenticated user to gain access to lpd servic...

CVE-1999-0909

CVE-1999-0909 affects multihomed Windows systems. The vulnerability allows a remote attacker to bypass IP source routing restrictions by sending a malformed IP options packet, named the “Spoofed Route Pointer.” The connected Red Hat and CVE listings reference the same description. No explicit pro...

CVE-1999-0969

The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork...

CVE-1999-0969

CVE-1999-0969 affects the Windows NT RPC service. A remote attacker can trigger a denial-of-service by sending spoofed malformed RPC packets that cause the service to emit an error message back to the spoofed host, potentially creating a loop (the Snork vulnerability). The available documents ide...

CVE-1999-0909

Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability...

CVE-1999-0909: Undefined Security Weakness

Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability...

CVE-1999-0969: Undefined Security Weakness

The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork...

CVE-1999-1379

DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker...

lynx-2.8.x.txt

// This message hasn't been sent to lynx-dev list, as it requires // subscription for sending bugreports. Sorry for that. Since 2.7 releases ?, lynx has mechanisms to avoid spoofed 'special URLs'. It's designed to protect lusers from malicious, internal pseudo-protocols like LYNXDIRED://,...