Red Hat Enterprise Linux quagga远程拒绝服务漏洞

CVE ID: CVE-2010-1674,CVE-2010-1675 Quagga是基于TCP/IP的路由软件套件，Quagga bgpd守护程序实现BGP路由协议。 Quagga的bgpd守护程序处理某些路由量度信息的方式存在拒绝服务漏洞，带特制路径限制属性的BGP消息可造成bgpd程序重置其与接收消息的对等端的会话。Quagga bgpd守护程序处理畸形路由扩展社区属性时存在空指针引用漏洞，配置的BGP对等端可通过特制的BGP消息造成目标系统上的bgpd崩溃。 RedHat Enterprise Linux Server Optional 6 RedHat Enterprise...

SuSE9 Security Update : quagga (YOU Patch Number 12685)

This security update of quagga fixes : - Direct BGP peers can send malformed extended communities which lead to a NULL pointer dereference. CVE-2010-1674 - A malformed ASPATHLIMIT path attribute will cause a session reset in Quagga. This malformed package is forwarded by other routers and can be...

SuSE 11.1 Security Update : quagga (SAT Patch Number 4023)

This security update of quagga fixes : - Direct BGP peers can send malformed extended communities which lead to a NULL pointer dereference. CVE-2010-1674 - A malformed ASPATHLIMIT path attribute will cause a session reset in Quagga. This malformed package is forwarded by other routers and can be...

SuSE 10 Security Update : quagga (ZYPP Patch Number 7355)

This security update of quagga fixes : - Direct BGP peers can send malformed extended communities which lead to a NULL pointer dereference. CVE-2010-1674 - A malformed ASPATHLIMIT path attribute will cause a session reset in Quagga. This malformed package is forwarded by other routers and can be...

quagga security update

0.99.15-5el60.2 - Resolves: 684750 - CVE-2010-1674 CVE-2010-1675 quagga various flaws...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : quagga vulnerabilities (USN-1095-1)

It was discovered that Quagga incorrectly parsed certain malformed extended communities. A remote attacker could use this flaw to cause Quagga to crash, resulting in a denial of service. CVE-2010-1674 It was discovered that Quagga resets BGP sessions when encountering malformed ASPATHLIMIT...

CVE-2010-1674

Removed by vendor...

Debian DSA-2197-1 : quagga - denial of service

It has been discovered that the Quagga routing daemon contains two denial-of-service vulnerabilities in its BGP implementation : - CVE-2010-1674 A crafted Extended Communities attribute triggers a NULL pointer dereference which causes the BGP daemon to crash. The crafted attributes are not...

[SECURITY] [DSA 2197-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2197-1 [email protected] http://www.debian.org/security/ Florian Weimer March 21, 2011 http://www.debian.org/security/faq -...

CVE-2007-1674

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16457 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/landeskaolnsrvr.rb 2025-02-06 03:13:38+00:00| seen|...

LANDesk Management Suite 8.7 - Alert Service Buffer Overflow (Metasploit)

$Id: landeskaolnsrvr.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

quagga -- two DoS vulnerabilities

Quagga developers report: Quagga 0.99.18 has been released. This release fixes 2 denial of services in bgpd, which can be remotely triggered by malformed AS-Pathlimit or Extended-Community attributes. These issues have been assigned CVE-2010-1674 and CVE-2010-1675. Support for AS-Pathlimit has be...

LANDesk Management Suite 8.7 Alert Service Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'LANDesk...

CVE-2009-1674

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a TOOLSETTINGS section in a .mcp file, possibly a related issue to CVE-2009-1608...

CVE-2009-1674

CVE-2009-1674 describes a stack-based buffer overflow in Microchip MPLAB IDE 8.30. The vulnerability can allow user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a [TOOL_SETTINGS] section of a .mcp file, potentially related to CVE-2009-1608. The connected records...

CVE-2009-1674

creationtimestamp| type| source ---|---|--- 2009-05-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8656...

CVE-2008-1674

...

CVE-2008-1674

CVE-2008-1674 is rejected/not used and does not represent an active vulnerability entry.

Debian Security Advisory DSA 1674-1 (jailer)

The remote host is missing an update to jailer announced via advisory DSA 1674-1. OpenVAS Vulnerability Test $Id: deb16741.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1674-1 jailer Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1674-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...