6141 matches found
602Pro Lan Suite Denial Of Service
This problem was found with Version 2000A build 2000.1.0.35 latest version. The problem is effective locally and remotely on NT-4 and Windows 98.I haven't tested others. I dont have anything fancy to say about it really. Just somthing that was overlooked by the developers as was the last problem...
Alt-N MDaemon 3.5.65.0.76.x - IMAP Denial of Service
Alt-N MDaemon 3.5.65.0.76.x - IMAP Denial of Service source: https://www.securityfocus.com/bid/2508/info A successfully logged-in user, via IMAP, could cause MDaemon to terminate the connection. If the user submits either a 'SELECT' or 'EXAMINE' command appended with 250 or more characters, MDaem...
Alt-N MDaemon 3.5.6/5.0.7/6.x - IMAP Denial of Service
source: https://www.securityfocus.com/bid/2508/info A successfully logged-in user, via IMAP, could cause MDaemon to terminate the connection. If the user submits either a 'SELECT' or 'EXAMINE' command appended with 250 or more characters, MDaemon will refuse any new connections to the IMAP servic...
APC UPS 3.7.2 - 'apcupsd' Local Denial of Service
/ Local Denial of Service for any linux box running APCUPSD v3.7.2 APCUPSD has his pid file world writeable, therefore it is possible to let it kill another pid and create a denial of service against any running daemon. when the apcupsd is stopped, for example Bug discovered by: Mattias Dartsch...
CVE-2000-0880
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file...
CVE-2000-0880
The CVE-2000-0880 entry concerns LPPlus creating the lpdprocess file with world-writable permissions, which allows local users to kill arbitrary processes by specifying a process ID and using the setuid dcclpdshut program to terminate the specified process. Impact is local access and partial inte...
CVE-2000-0273
Technical details about CVE-2000-0273 are not publicly available in the provided documents. Monitor for updates.
CVE-2000-0273
PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt...
Cisco Security Advisory: Cisco Secure PIX Firewall TCP Reset Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco Secure PIX Firewall TCP Reset Vulnerability Revision 1.0 For Public Release 2000 July 11 06:00 US/Eastern UTC+0400 ------------------------------------------------------------------------ Summary ======= The Cisco Secure PIX Firewall cannot distinguish...
CVE-2000-0549
Kerberos 4 KDC program does not properly check for null termination of AUTHMSGKDCREQUEST requests, which allows remote attackers to cause a denial of service via a malformed request...
CVE-1999-0780
KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file...
Re: A funny way to DOS pcANYWHERE8.0 and 9.0
I also found on PCAnywhere version 8.0, if you accidently terminate a session e.g. unplug your network cable from your PC, get dropped from a dialup network connection, etc. that you hang up web, ftp, telnet, indexing, PCAnywhere and several other services on the host PC. The easiest way to recov...
CVE-2000-0273
PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt...
Zeus Web Server 3.x - Null Terminated Strings
Zeus Web Server 3.x - Null Terminated Strings source: https://www.securityfocus.com/bid/977/info Appending "%00" to the end of a CGI script filename will permit a remote client to view full contents of the script if the CGI module option "allow CGIs anywhere" is enabled. Scripts located in...
Linux Kernel 2.0 / 2.1 Send SIGIO Signal
/ source: https://www.securityfocus.com/bid/111/info A vulnerability in the Linux kernel allows any user to send a SIGIO signal to any process. If the process does not catch or ignore the signal is will exit. / / On non-glibc systems you must add define OASYNC FASYNC / include include include...
CVE-1999-0425
talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes...
CVE-1999-0288
The CVE-1999-0288 issue affects the WINS server in Microsoft Windows NT 4.0 prior to SP4, where remote attackers can terminate the WINS process by sending invalid UDP frames to NETBIOS Name Service port 137. Exploitation is described as a flood of random UDP packets causing a denial of service. T...
CVE-1999-0288
The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service process termination via invalid UDP frames to port 137 NETBIOS Name Service, as demonstrated via a flood of random packets...
netBSD_local_DoS.txt
Subject: Re: NetBSD 1.4.1 local DoS To: [email protected] This does not freeze' the system per se. What it does is tie up all the network resources, and make it impossible to any network I/O even through Unx-domain sockets. Linux is not generally vulnerable to the exploit as posted, becau...