denial of service vulnerability

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Game Theoretic Resistance to Denial of Service Attacks Using Hidden Difficulty Puzzles

Denial of Service DoS vulnerabilities are one of the major concerns in today's Internet. Client-puzzles offer a good mechanism to defend servers against DoS attacks. This paper introduces the notion of hidden puzzle difficulty, where the attacker cannot determine the difficulty of the puzzle without expending a minimal amount of...

Tags: Game, Denial Of Service, Puzzle, Denial Of Service Vulnerability, Game Theory, Defense Mechanism, Security

White papers 2009-07-16

Windows 2000 Telnet Server Flooding Vulnerability Patch (Windows)

A remote denial of service vulnerability has been discovered in the Telnet Server that ships with Microsoft Windows 2000. The denial of service can occur when a malicious client sends a particular malformed string to the server. Although the Telnet service is provided as part of Windows 2000 products, the...

Tags: Denial Of Service, Vulnerability, Server, Denial Of Service Vulnerability, Telnet, Microsoft Windows, Microsoft Windows 2000, Security, Networking, Operating Systems, Software

Software downloads 2000-07-31

Additional Resources

Microsoft confirms 'detailed' Windows 7 exploit

Ummm interesting....so just block 139 and 445...445? great that port aggain.Is SMB blocked to/from internet by th firewall by default?RE: Microsoft confirms 'detailed' Windows 7 exploitPorts 139 and 445 are blocked by default for Internet access by Windows firewall in Windows 7 and any commerical hardware firewall. They are enabled...

Tags: Firewalls, SMB/SME, SMB protocol, Microsoft Windows 7, firewall, Windows 7 exploit, Microsoft Windows, small and medium business, Microsoft Windows Vista, operating system, Microsoft Corp.

Discussion threads 2009-11-16

Microsoft probing Windows 7 zero-day hole

Microsoft said it is looking into a report of a vulnerability in Windows 7 and Server 2008 Release 2 that could be used by an attacker to remotely crash the computer. Microsoft said on Wednesday it is looking into a report of a vulnerability in Windows 7 and Server...

Tags: Vulnerability, Microsoft Corp., Server Message Block, Microsoft Windows 7, Microsoft Windows, Security, Operating Systems, Software, Microsoft, attack, zero day, Elinor Mills CNET News

News items 2009-11-12

Windows 7 security default worries experts

How many Windows 7 does it take...How many dribble articles about Windows 7 canthere be in one week.I heard Windows 7 is now helping the economy andit has changed global warming to global cooling.So the polar bears are now SAFE!!! Way to go Windows 7 it is like the messiah...

Tags: Operating systems, Ubunutu, Microsoft Windows 7, security, Microsoft Windows, Microsoft Corp., Win7

Discussion threads 2009-10-22

Remote exploit released for Windows Vista SMB2 worm hole

Time for an out-of-cycle patch Microsoft. nt.This exploit doesn't countIf the exploit was created by security researchers, it doesn't count.Cue the double standards...It's called "Proof of concept".Originally classified as "Denial of Service", it is now proved to be wormable in every version of Windows currently on the market.But feel free...

Tags: Microsoft Windows Vista (Longhorn), Apple Mac OS X, Operating systems, NonZealot, TODAY XP, Microsoft Windows Vista, Microsoft Windows

Discussion threads 2009-09-17

Why Your Standard IPS Leaves You Open to DDoS Attacks

Off late Distributed Denial of Service DDoS attacks are specifically designed to leverage the weaknesses of a standard Intrusion Prevention System IPS, which is not able to defend against a bombardment of high packet-per-second PPS traffic. Innovated by Radware, real-time signatures can overcome this vulnerability, especially when accelerated by the...

Tags: RADWARE, Distributed Denial Of Service, Intrusion Prevention, Security

White papers 2009-09-15

'Anonymous' group attempts DDoS attack against Australian government

Following a threat posted on YouTube a month ago, the the well known malicious pattern of the "Anonymous group" failed to materialize earlier today when the group attempted to launch a distributed denial of service DDoS attack against the web sites of Australia's Prime Minister and the Australian Communications and...

Tags: Government, Crowdsourcing, Distributed Denial Of Service, Security, Dancho Danchev

Blog posts 2009-09-09

Microsoft confirms SMB2 vulnerability, warns of code execution risk

Feel free to delete this Ryan.ThanksIsn't it about time we stop playing nice andfind these people who create such an endless stream of blank and do a bit of Vlad the Impaler on them? Catch em... give them a fair trial (I want to be certain we publicly impale...

Tags: Microsoft Windows Vista (Longhorn), SECURITY, Microsoft Corp., SMB2, Microsoft Windows Vista, vulnerability, beta

Discussion threads 2009-09-09

Apple drops (another) Mac OS X security patch

Less than a week after fixing 19 Mac OS X security vulnerabilities, Apple is on the patch treadmill again. The company released Security Update 2009-004 to fix a solitary BIND vulnerability that could lead to denial of service attacks.  Apple warns: A...

Tags: Apple Macintosh, BIND, Apple Inc., Apple Mac OS X, Domain Names, Apple Mac OS, Operating Systems, Security, Software, Internet, Ryan Naraine

Blog posts 2009-08-12

Microsoft: Exploits likely for 'critical' Windows vulnerabilities

Microsoft today dropped a mega patch bundle with fixes for several "critical" vulnerabilities affecting the Windows platform and warned that "consistent, reliable exploit code" was likely to be released within 30 days. The Redmond, Wash. software maker released nine bulletins -- five rated critical -- to provide...

Tags: Windows Vulnerability, Vulnerability, Microsoft Windows, Exploit Code, Microsoft Corp., Security, Ryan Naraine

Blog posts 2009-08-11

Apple: Won't somebody please think of the cellphone towers?

Apple: Won't somebody please think of the cellphone towers?24 season 9 plot thread?Jack Bauer has to foil an assassination attempt on Steve Jobs. Chloe arms him with a jailbroken iPhone that cripples every cell tower in Cupertino. Jack activates the iPhone, only to find out that Steve Ballmer has already...

Tags: Smart phones, Cellular phones, Apple iPhone, Apple Inc., cell phone, Jack Bauer

Discussion threads 2009-07-29

Remote code execution exploit for Firefox 3.5 in the wild

A zero day exploit (Firefox 3.5 Heap Spray Vulnerability) affecting Mozilla's latest Firefox release has been published in the wild. Through an error in the processing of JavaScript code in 'font tags' malicious attackers could achieve arbitrary code execution and install malware on the affected hosts....

Tags: Mozilla Firefox, Exploit, Web Browsers, Internet, Dancho Danchev

Blog posts 2009-07-14

iPhone executes SMS binary code as root

iPhone executes SMS binary code as rootNo, iPhone is NOT UNIX basedWe all know that OS X [b]is[/b] UNIX certified.We also know that iPhone OS [b]is[/b] OS X.Therefore, iPhone OS isn't just UNIX based, it [b]is[/b] UNIX.Therefore, it is immune to all malware.At least I think that is how the...

Tags: Text messaging/SMS/MMS, Telephony, Smart phones, Operating systems, Apple iPhone, Apple Inc., Unix, SMS, binary code, iPhone OS, Miller

Discussion threads 2009-07-02

Vulnerability Analysis of Extensible Authentication Protocol (EAP) DoS Attack Over Wireless Networks

IEEE 802.11 supports 802.1x to provide strong authentication mechanism for Wireless networks. 802.1x utilizes Extensible Authentication Protocol EAP as a framework for authentication, allowing for a number of authentication methods to be used. Unfortunately, 802.1x includes some unprotected EAP packets during authentication process which can be easily exploited by an...

Tags: Network, Vulnerability, IEEE 802.1X, Analysis, Authentication, Wireless Network, Wireless, Universiti Putra Malaysia, Wi-Fi, Wireless And Mobility, Security

White papers 2009-07-01

Guy Kawasaki's Twitter account hijacked, pushes Windows and Mac malware

Guy Kawasaki's Twitter account hijacked, pushes Windows and Mac malwareMore details about severity of attack[i]On Windows machines, a user falling for the bait gets to a series of Web pages featuring pornographic content and, at the end, a prompt to update a video codec. That fake codec is...

Tags: Operating systems, Spyware, adware & malware, Cyberthreats, Apple Mac OS X, malware, Microsoft Windows, Apple Macintosh, Guy Kawasaki, attack, user interaction, disk image, Twitter

Discussion threads 2009-06-24

Adobe patches 13 critical Reader, Acrobat vulnerabilities

Adobe has issued its first ever scheduled quarterly update for its Reader/Acrobat product line, a mega-patch covering 13 documented security vulnerabilities. The patches address "critical vulnerabilities" in Adobe Reader 9.1.1 and Acrobat 9.1.1 and earlier versions.  "These vulnerabilities would cause the application to crash and could potentially...

Tags: Adobe Systems Inc., Adobe Acrobat, Vulnerability, Update, Arbitrary Code Execution, Memory Corruption Vulnerability, Security, Ryan Naraine

Blog posts 2009-06-09

Patch Tuesday heads-up: 8 bulletins, 5 critical

Patch Tuesday heads-up: 8 bulletins, 5 criticalPatch TuesdayGood ol' patch Tuesday. We definitely need a Google Operating system. http://googlescloud.blogspot.comTo the blind with screen readers, this image contains a table.This table has 9 rows and 2 columns.Heading Row 1Heading Column 1: Bulletin IDHeading Column 2: Maximum Severity Rating and Vulnerability ImpactRow...

Tags: Linux, Operating systems, Patch Tuesday, operating system

Discussion threads 2009-04-09

Conficker: a good excuse for an early spring cleaning

Some of you have probably heard about Conficker.C, the computer virus/worm that is set to activate on April 1st.  Conficker.C exploits a particular vulnerability in Windows that was announced in October of 2008 which allows code to be remotely executed. Nobody exactly knows what Conficker.C is supposed to do on...

Tags: Antivirus, Malware, Antivirus Software, Virus, Conficker.C, Chances, CLAMAV, CCleaner, WinDirStat, Microsoft Windows, Cyberthreats, Spyware, Adware & Malware, Spyware, Viruses And Worms, Tools & Techniques, Security, Operating Systems, Software, Management, Jason Perlow

Blog posts 2009-03-27

Exploit code sends Mozilla scrambling to fix Firefox

Exploit code sends Mozilla scrambling to fix FirefoxNot intended to be flame-bait butWhere are the howls of outrage that we'd see if this were IE8? RE: Exploit code sends Mozilla scrambling to fix FirefoxYou don't get howls cause it gets fixed too quick! That my friend is the difference. The...

Tags: Web browsers, Mozilla Firefox, Mozilla Corp., exploit code, Novell AppArmor, Web browser

Discussion threads 2009-03-26