Cisco HSRP Weakness/DoS

Hi I was playing with Cisco's HSRP Hot Standby Routing Protocol, and there is a major weakness in that protocol that allow any host in a LAN segment to make a HSRP DoS. Short very explain of HSRP. HSRP uses UDP on port 1985 to multicast address 224.0.0.2, and the authentication is in clear text...

CVE-2001-0324

Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash...

Cisco Catalyst 2900 12.0 - 5.2XU SNMP Empty UDP Packet Denial of Service

Cisco Catalyst 2900 12.0 - 5.2XU SNMP Empty UDP Packet Denial of Service source: https://www.securityfocus.com/bid/2689/info The Catalyst series switch is a scalable, high performance layers 2 and 3 switch manufactured by Cisco Systems. The Catalyst series ranges in size, and is designed for use ...

Cisco Catalyst 2900 12.0 - '5.2'XU SNMP Empty UDP Packet Denial of Service

source: https://www.securityfocus.com/bid/2689/info The Catalyst series switch is a scalable, high performance layers 2 and 3 switch manufactured by Cisco Systems. The Catalyst series ranges in size, and is designed for use in organizations sized from small business to large enterprise. A problem...

Дырка в ADSL-модемах Alcatel (UDP echo tftp spoofing)

Если в локальной сети есть машина поддерживающая UDP echo, то можно через нее получить доступ по TFTP К модему...

CVE-2001-1400

Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service deadlock...

[SECURITY] [DSA-047-1] multiple kernel problems

Package : various kernel packages Problem type : multiple Debian-specific: no The kernels used in Debian GNU/Linux 2.2 have been found to have multiple security problems. This is a list of problems based on the 2.2.19 release notes as found on http://www.linux.org.uk/ : binfmtmisc used user pages...

IPFilter 3.x - Fragment Rule Bypass

source: https://www.securityfocus.com/bid/2545/info IPFilter is a packet filtering implementation that is in wide use on a variety of Unix systems. There exists a vulnerability in IPFilter that can allow an attacker to communicate with blocked ports on hosts behind an IPFilter firewall. The...

IPFilter 3.x - Fragment Rule Bypass

IPFilter 3.x - Fragment Rule Bypass source: https://www.securityfocus.com/bid/2545/info IPFilter is a packet filtering implementation that is in wide use on a variety of Unix systems. There exists a vulnerability in IPFilter that can allow an attacker to communicate with blocked ports on hosts...

A fragmentation attack against IP Filter

I did not want to release this on a Friday afternoon. Happy experimenting -Thomas ---- cut here ---- A fragmentation attack against IP Filter April 6th, 2001 Thomas Lopatic [email protected] The research for this advisory was supported by TUV data protect GmbH, a TUV Rheinland/Berlin-Brandenburg...

CVE-2001-0324

Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash...

CVE-2001-0324

The vulnerability (CVE-2001-0324) affects Windows 98 and Windows 2000 Java clients. A Java applet can open a large number of UDP sockets, the underlying cause being excessive UDP socket creation, which prevents the host from establishing additional UDP connections and can lead to a crash. No expl...

NTPd - Remote Buffer Overflow

NTPd - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/2540/info NTP, the Network Time Protocol, is used to synchronize the time between a computer and another system or time reference. It uses UDP as a transport protocol. There are two protocol versions in use: NTP v3 and NTP...

Bugs in NukeNabber 2.9b

By default Nukenabber listens on port 19udp for connections, and gathers information on the source address... If we send binary zero's to it this is what we get sends binary zeros nc target 19 -u /dev/zero this appears on nukenabber 02/11/2001 23:53:14.310 GMT-0500 Unable to determine source of...

Локальный DoS против Windows

Открытие большого числа datagram-сокетов в клиентском приложении приводит к невозможности работать с UDP Включая разрешение имен...

Windows client UDP exhaustion denial of service

Georgi Guninski security advisory 37, 2001 Windows client UDP exhaustion denial of service Systems affected: Windows 2000 Prof, Windows 98 probably other Windowses Risk: Low Date: 6 February 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may distribute it unmodified. Yo...

CVE-2000-1080

Quake 1 quake1 and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed empty UDP packet...

CVE-2000-1080

CVE-2000-1080 applies to Quake 1, ProQuake 1.01 and earlier. The vulnerability arises from processing an empty/malformed UDP packet, causing a denial-of-service condition via remote network input. Affected components are the game server/client networking code handling UDP datagrams; the root caus...

CVE-2000-1159

NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands...

CVE-2000-1159

CVE-2000-1159 affects the NAI Sniffer Agent. The vulnerability allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands. The NVD entry assigns a base score of 7.5 (HIGH) with network attack vector, low attack complexity, and ...