eEye Digital Security IRIS 1.0.1 / SpyNet CaptureNet 3.0.12 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1627/info IRIS from eEye Digital Security is a protocol analyzer geared towards network management, it is currently in BETA. This product was formerly known as SpyNet CaptureNet. Certain versions of the this software are vulnerable to a remotely triggered...

eEye Digital Security IRIS 1.0.1 SpyNet CaptureNet 3.0.12 - Remote Buffer Overflow

eEye Digital Security IRIS 1.0.1 SpyNet CaptureNet 3.0.12 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/1627/info IRIS from eEye Digital Security is a protocol analyzer geared towards network management, it is currently in BETA. This product was formerly known as SpyNet...

CVE-2000-0339

ZoneAlarm Personal Firewall (Windows) versions 2.1.10 and earlier fail to monitor UDP traffic with a source port of 67, allowing remote attackers to bypass firewall rules. This vulnerability (CVE-2000-0339) is documented by OpenVAS/Nessus entries noting a bypass of the ruleset and recommending up...

CVE-2000-0339

ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules...

Check Point Software Firewall-1 3.0/1.4.0/1.4.1 - Spoofed Source Denial of Service

// source: https://www.securityfocus.com/bid/1419/info If Checkpoint Firewall-1 receives a number of spoofed UDP packets with Source IP = Destination IP, the firewall and likely the machine hosting it crashes. NOTE: This vulnerability while being posted to Bugtraq is currently being denied as a...

CVE-2000-0569

Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface...

Sybergen SyGate 2.03.11 - Denial of Service

Sybergen SyGate 2.03.11 - Denial of Service // source: https://www.securityfocus.com/bid/1420/info An exploit which causes a Denial of Service to Sybergen's Sygate when run from an internal machine has been released. The exploit sends a UDP packet to port 53 of the gateway. //Sygate Crash by:...

Sybergen SyGate 2.0/3.11 - Denial of Service

// source: https://www.securityfocus.com/bid/1420/info An exploit which causes a Denial of Service to Sybergen's Sygate when run from an internal machine has been released. The exploit sends a UDP packet to port 53 of the gateway. //Sygate Crash by: [email protected] April-00 //http://www.eEye.com...

Microsoft Windows Server 2000 - Remote CPU-overload

source: https://www.securityfocus.com/bid/1415/info Sending a stream of binary zeros to any one of a number of Windows 2000 ports can cause 100% CPU utilization. The ports that were found vulnerable include TCP ports 7, 9, 21, 23, 7778 and UDP ports 53, 67, 68, 135, 137, 500, 1812, 1813, 2535,...

Microsoft Windows Server 2000 - Remote CPU-overload

Microsoft Windows Server 2000 - Remote CPU-overload source: https://www.securityfocus.com/bid/1415/info Sending a stream of binary zeros to any one of a number of Windows 2000 ports can cause 100% CPU utilization. The ports that were found vulnerable include TCP ports 7, 9, 21, 23, 7778 and UDP...

old DOS still good 4 win2k

Well, nothing new on the flatline, but I think that can be useful to send this one. We tested out the win 2k beta version, and we've found that some old attacks are still valid to cause a DOS. Specifically the simple ping flood from a PII 300 to another PII 300 with 64Mb RAM, can freez the box...

CVE-2000-0522

RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port with UDP packets, which causes the server to crash...

Potential DoS Attack on RSA's ACE/Server

Hi folks, RSA Security http://www.rsasecurity.com/ produce a 2 factor secure authentication solution called ACE/Server. This uses SecurID tokens to enforce authentication and runs on NT/2000 and Solaris. It is possible for a nonprivileged user on the same network as the ACE/Server to trivially...

DoS против ACE/Server

большое число случайных UDP-данных в порт авторизации приводит к аварийному завершению приложения...

kill_sntsd.pl

I noticed an uncommon scanf overflow in the Simple Network Time Sync daemon and client version 1.0, tested on Redhat 6.1. I haven't looked into this fully yet, but it looks as tho it could be root comprimising as it sits on a priveledged udp port and seems to coredump, but looks like it only give...

Проблемы со службой обзора (Browser)

Служба обзора сети базируется на UDP и не поддерживает авторизации. В спецификации службы есть описания пакетов, кторые служат для остановки службы обзора. Таким образом можно остановить все обозреватели сети. Кроме того, можно вызвать перегрузку сети зарегестрировав чрезвычайно большой список...

Удаленная дырка в gdm (Gnome)

Классическое переполнение буфера, позволяет получить привелегии root если gdm прослушивает порт UDP/177 по-умолчанию выключено в большинстве систем...

disable.tcpdump

Greetings. There is a way to disable tcpdump running on a remote host. By sending a carefully crafted UDP packet on the network which tcpdump monitors, it is possible, under certain circonstances, to make tcpdump fall into an infinite loop. This undesired behaviour has serious consequences for an...

Denial of service attack against tcpdump

Greetings. There is a way to disable tcpdump running on a remote host. By sending a carefully crafted UDP packet on the network which tcpdump monitors, it is possible, under certain circonstances, to make tcpdump fall into an infinite loop. This undesired behaviour has serious consequences for an...

CVE-2000-0339

ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules...