CVE-2000-0289

Summary: CVE-2000-0289 concerns the Linux kernel IP Masquerade (NAT) feature on 2.2.x, where the UDP DLOOSE behavior can allow an attacker to send arbitrary UDP packets to hosts behind a vulnerable NAT by matching only destination IP/port, potentially affecting existing sessions. What is affected...

CVE-1999-0675: Undefined Security Weakness

Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host...

CVE-2000-0289: Undefined Security Weakness

IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection...

WebTV for Windows 98/ME - Denial of Service

source: https://www.securityfocus.com/bid/1671/info If a remote user sends a UDP packet to any port in the 22701 - 22705 range to a system running WebTV for Windows, the system may crash entirely or at the least the program will stop responding. As well, sending a UDP packet to port 22703...

WebTV for Windows 98ME - Denial of Service

WebTV for Windows 98ME - Denial of Service source: https://www.securityfocus.com/bid/1671/info If a remote user sends a UDP packet to any port in the 22701 - 22705 range to a system running WebTV for Windows, the system may crash entirely or at the least the program will stop responding. As well,...

CVE-2000-0339

ZoneAlarm Personal Firewall (Windows) versions 2.1.10 and earlier fail to monitor UDP traffic with a source port of 67, allowing remote attackers to bypass firewall rules. This vulnerability (CVE-2000-0339) is documented by OpenVAS/Nessus entries noting a bypass of the ruleset and recommending up...

Check Point Software Firewall-1 3.0/1.4.0/1.4.1 - Spoofed Source Denial of Service

// source: https://www.securityfocus.com/bid/1419/info If Checkpoint Firewall-1 receives a number of spoofed UDP packets with Source IP = Destination IP, the firewall and likely the machine hosting it crashes. NOTE: This vulnerability while being posted to Bugtraq is currently being denied as a...

old DOS still good 4 win2k

Well, nothing new on the flatline, but I think that can be useful to send this one. We tested out the win 2k beta version, and we've found that some old attacks are still valid to cause a DOS. Specifically the simple ping flood from a PII 300 to another PII 300 with 64Mb RAM, can freez the box...

Objectserver vulnerability

Since the patches are now officially released, I feel I can finally release the details of the SGI objectserver vulnerability. This vulnerability was initailly reported to CERT and SGI Security on October 6, 1997. A beta version of patch 2849 was provided in February 1998. Howard ----- Forwarded...

CVE-2000-0289

IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection...

CVE-1999-0063

CVE-1999-0063 affects Cisco IOS 12.0 and related 11.3/12.0 branches. The issue: processing of malformed UDP packets to the syslog port (UDP 514) can cause the device to crash or hang. Red Hat/Nessus entries and Cisco advisories corroborate that the vulnerability stems from handling invalid UDP sy...

CVE-1999-0063

Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port...

CVE-1999-0217

Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems...

CVE-1999-0438

Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address...

CVE-1999-0217

CVE-1999-0217 affects SunOS 4.1.3 where malicious UDP option settings can force a reboot. Connected documents reaffirm SunOS 4.1.3 as the affected software and describe the root cause as malicious UDP option handling. There is no explicit information in the provided documents about a fixed versio...

EUVD-1999-0063

Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port...

CVE-1999-0217: Undefined Security Weakness

Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems...

CVE-1999-0063: Undefined Security Weakness

Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port...

Microsoft Windows NT WINS Service Malformed Data DoS

We could crash the remote WINS server by sending it a lot of UDP packets containing random data. If you do not use WINS, then deactivate this server. An attacker may use this flaw to bring down your NT network. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10315;...

cisco-ios-DoS.alert.txt

Date: Mon, 11 Jan 1999 16:00:56 -0000 From: [email protected] Reply-To: [email protected] To: [email protected] Subject: Cisco Security Notice: Cisco IOS Syslog Crash -----BEGIN PGP SIGNED MESSAGE----- Field Notice: Cisco IOS Syslog Crash...