long sendmail timeouts let attacker prevent milter quiesce

Summary: An attacker that can predict when a milter will need to quiesce input to allow for a reload may hold open an SMTP session for several hours. This will lead to a DoS condition on the mailserver. Background: Sendmail is a popular Mail Transfer Agent MTA, used in many large sites that requi...

[Full-Disclosure] FreeBSD Security Advisory FreeBSD-SA-04:04.tcp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:04.tcp Security Advisory The FreeBSD Project Topic: many out-of-sequence TCP packets denial-of-service Category: core Module: kernel Announced: 2004-03-02...

PT-2003-1766 · Novell · Novell Ichain

Name of the Vulnerable Software and Affected Versions: Novell iChain version 2.2 before Support Pack 1 Description: The issue allows remote attackers to guess usernames and conduct brute force password guessing more easily due to a shorter timeout for non-existent users compared to valid users...