CVE-2005-0356

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers PAWS with the timestamps option enabled allow remote attackers to cause a denial of service connection loss via a spoofed packet with a large timer value, which causes the host to discard later packets because they appe...

CVE-2005-0356: Undefined Security Weakness

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers PAWS with the timestamps option enabled allow remote attackers to cause a denial of service connection loss via a spoofed packet with a large timer value, which causes the host to discard later packets because they appe...

TCP TIMESTAMPS Denial of Service Exploit

No description provided by source. / TCP does not adequately validate segments before updating timestamp value http://www.kb.cert.org/vuls/id/637934 RFC-1323 TCP Extensions for High Performance 4.2.1 defines how the PAWS algorithm should drop packets with invalid timestamp options: R1 If there is...

TCP TIMESTAMPS Denial of Service Exploit

Exploit for multiple platform in category dos / poc ======================================== TCP TIMESTAMPS Denial of Service Exploit ======================================== / TCP does not adequately validate segments before updating timestamp value http://www.kb.cert.org/vuls/id/637934 RFC-1323...

TCP TIMESTAMPS - Denial of Service

/ TCP does not adequately validate segments before updating timestamp value http://www.kb.cert.org/vuls/id/637934 RFC-1323 TCP Extensions for High Performance 4.2.1 defines how the PAWS algorithm should drop packets with invalid timestamp options: R1 If there is a Timestamps option in the arrivin...

CVE-2005-1504

The CVE-2005-1504 entry concerns GameSpy SDK CD-Key Validation Toolkit. The vulnerability is a remote bypass of CD-key validation by sending a spoofed \disc\ command, causing the server to believe the CD key is no longer in use. Affected component: the CD-key validation mechanism within the GameS...

CVE-2005-1504

GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key validation by sending a spoofed \disc\ command, which tells the server the CD key is no longer in use...

CVE-2005-1504

GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key validation by sending a spoofed \disc\ command, which tells the server the CD key is no longer in use...

CVE-2004-1799

CVE-2004-1799 describes a vulnerability in PF (packet filter) on certain OpenBSD versions where, when stateful filtering is enabled, packets for a session are not limited to the original interface. This allows a remote attacker to bypass intended packet filters by sending spoofed packets to other...

CVE-2004-1799: Undefined Security Weakness

PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces...

CVE-2005-0158

Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses...

Tcpdump 3.8.x - ldp_print Infinite Loop Denial of Service

Tcpdump 3.8.x - ldpprint Infinite Loop Denial of Service / tcpdump3.8.x: LDP ldpprint infinite loop DOS. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xtcpdump-ldp-dos.c -o xtcpdump-ldp-dos tcpdump homepage/URL: http://www.tcpdump.org fix: this appears to have been fixed in the alph...

CVE-2001-1452

Affected software: Windows NT 4.0 and Windows 2000 Server. Vulnerability: DNS servers cache glue records from non-delegated name servers by default, enabling remote attackers to poison the DNS cache via spoofed DNS responses. Root cause: Default caching behavior of glue records. Impact: DNS cache...

Microsoft Windows TCP/IP stack multiple vulnerabilities

Memory corruption on IP packets handling, TCP connection reset with spoofed TCP and ICMP packets, a varinat of LAND attack...

CVE-2004-0790

Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service reset TCP connections via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks;...

Multiple Vendor ICMP Implementation - Spoofed Source Quench Packet Denial of Service

source: https://www.securityfocus.com/bid/13124/info Multiple vendor implementations of TCP/IP Internet Control Message Protocol ICMP are reported prone to several denial-of-service attacks. ICMP is employed by network nodes to determine certain automatic actions to take based on network failures...

TCP/IP implementations do not adequately validate ICMP error messages

Overview Multiple TCP/IP implementations do not adequately validate ICMP error messages. A remote attacker could cause TCP connections to drop or be degraded using spoofed ICMP error messages. Description A number of widely accepted Internet standards describe different aspects of the relationshi...

CVE-2003-1118

Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service client crash and execute arbitrary code via a spoofed server response containing a long string followed by a \n newline character...

CVE-2005-0591: Undefined Security Weakness

Firefox before 1.0.1 allows remote attackers to spoof the 1 security and 2 download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."...

CVE-2004-1513: Undefined Security Weakness

04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries...