Searching traffic software vulnerabilities

Quake 1 server responds to an initial UDP game

connection | attackers | amplifier | spoofing | responds | traffic | "Smurf" | request | another | initial | remote | server | allows | attack | amount | style | large | which | Quake | host | game | use | UDP |

Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request.


BlackIce Defender 2.1 and earlier, and BlackIce

Defender | BlackIce | earlier | Pro |

BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting is Nervous or lower.


Microsys CyberPatrol uses weak encryption (triv

CyberPatrol | encryption | Microsys | weak | uses |

Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information.


iptables before 1.2.4 does not accurately conve

iptables | before |

iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator.


Netgear RP114 Cable/DSL Web Safe Router Firmwar

Cable/DSL | Firmware | Netgear | Router | RP114 | Safe | Web |

Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below port 1024, allows remote attackers to cause a denial of service (hang) via a port scan of the WAN port.


Etype Eserv 2.97 allows remote attackers to red

Eserv | Etype |

Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.


Directory traversal vulnerability in Multi Rout

vulnerability | Directory | traversal | Traffic | Grapher | Router | Multi |

Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the cfg parameter for (1) 14all.cgi, (2) 14all-1.1.cgi, (3) traffic.cgi, or (4) mrtg.cgi.


Sygate Enforcer 3.5MR1 and earlier passes broad

authentication | broadcast | attackers | filtering | Enforcer | traffic | earlier | remote | bypass | Sygate | before | passes | 35MR1 | rules | which | allow | could |

Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers to bypass filtering rules.


Unspecified vulnerability in 3Com OfficeConnect

OfficeConnect | vulnerability | Unspecified | attackers | service | remote | denial | allows | Router | cause | 3Com | ADSL | 11g |

Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service (crash) via a large amount of UDP traffic.


Kadu 0.4.2 and 0.5.0pre allows remote attackers

Kadu |

Kadu 0.4.2 and 0.5.0pre allows remote attackers to cause a denial of service (crash or generated traffic) via a malformed message, possibly with incomplete information.


BEA WebLogic Server and WebLogic Express 8.1 SP

synchronization | multicast | sensitive | attackers | WebLogic | messages | sniffing | traffic | cluster | earlier | Express | encrypt | remote | Server | which | might | allow | read | BEA | not | SP5 | SP4 |

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic, which might allow remote attackers to read sensitive cluster synchronization messages by sniffing the multicast traffic.


SMC Wireless Router model SMC7904WBRA allows re

SMC7904WBRA | attackers | Wireless | service | remote | denial | Router | allows | cause | model | SMC |

SMC Wireless Router model SMC7904WBRA allows remote attackers to cause a denial of service (reboot) by flooding the router with traffic.


NCP Secure Enterprise Client (aka VPN/PKI clien

Enterprise | Client | Secure | NCP |

NCP Secure Enterprise Client (aka VPN/PKI client) 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and destination port 68, and outbound UDP traffic with source port 68 and destination port 67.


Sun StorEdge 6130 Array Controllers with firmwa

StorEdge | Sun |

Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service (controller reboot) via a flood of traffic on the LAN.


The FTP server in the NEC MultiWriter 1700C all

MultiWriter | attackers | redirect | traffic | remote | allows | server | other | 1700C | sites | NEC | FTP |

The FTP server in the NEC MultiWriter 1700C allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command, a variant of CVE-1999-0017.


The ATOMIC.TCP signature engine in the Intrusio

Prevention | Intrusion | ATOMICTCP | signature | System | engine |

The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature.


The Teredo interface in Microsoft Windows Vista

Vulnerability" | information | Disclosure | interface | sensitive | attackers | Microsoft | firewall | blocking | properly | "Windows | Edition | Windows | traffic | certain | crafted | network | obtain | bypass | handle | Teredo | allows | remote | Vista | rules | which | Rule | IPv6 | does | x64 | not | via | aka |

The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote attackers to bypass firewall blocking rules and obtain sensitive information via crafted IPv6 traffic, aka "Windows Vista Firewall Blocking Rule Information Disclosure Vulnerability."


Tor before 0.1.2.14 can construct circuits in w

before | Tor |

Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.


SQL injection vulnerability in referralUrl.php

referralUrlphp | vulnerability | arbitrary | attackers | injection | parameter | commands | execute | Traffic | offset | allows | remote | Stats | SQL | via |

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL commands via the offset parameter.


TIBCO Rendezvous (RV) 7.5.2 does not protect co

Rendezvous | TIBCO |

TIBCO Rendezvous (RV) 7.5.2 does not protect confidentiality or integrity of inter-daemon communication, which allows remote attackers to capture and spoof traffic.


Software vulnerabilities results 1 to 20 of 110     
Page: 123456►