CVE-1999-0764

NetBSD ARP handling allows ARP packets to overwrite static ARP entries. This can affect ownership of IP-to-MAC mappings, with partial integrity and availability impact as per NVD metrics. The exact affected NetBSD versions, vulnerable code path, exploit details, and official remediation are not p...

CVE-1999-0763

CVE-1999-0763 affects NetBSD on multi-homed hosts: ARP traffic on one network can modify ARP entries on a different connected network, enabling cross-network ARP manipulation. This is described consistently across the NVD entry and Red Hat’s security page. No explicit remediation steps are provid...

CVE-1999-0763

NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network...

ARP Spoof

Spoof ARP replies and poison remote ARP caches to conduct IP address spoofing or a denial of service. Module Options msf use auxiliary/spoof/arp/arp/poisoning msf undefinedpoisoning show actions ...actions... msf undefinedpoisoning set ACTION msf undefinedpoisoning show options ...show and set...

solaris.chkperm+arp.txt

Greetings, OVERVIEW /usr/vmsys/bin/chkperm and /usr/sbin/arp can be used to read bin-owned files. BACKGROUND All my testing was done on Solaris 2.7 and 2.6 SPARC edition. DETAILS Vuln 1 - chkperm This one isn't nearly as interesting as the instant-shell variety. Here's how it works: chkperm is...

CVE-1999-0859

Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly...

CVE-1999-1548

Cabletron SmartSwitch Router SSR 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit...

nmap_cisco_dos.txt

From: "Lancashire, Andrew" This is to clarify what is being put out by Cisco and what we are being told by Cisco. Two e-mails below is what Cisco is telling us and makes alot more sense than what Cisco is telling Bugtraq. The last post to Bugtraq made mention that the arp cache was filling up and...

cisco_and_nmap_dos.txt

Subject: Re: Cisco and Nmap Dos To: [email protected] Hi all, I wanted to address the items listed here. We are still investigating this problem, and hope to have more information later on in the week. Item 1, OSPF is not an issue. According to the configuration information provided to us...

windows.arp.DoS.txt

Date: Mon, 12 Apr 1999 13:59:54 +0200 From: Joel Jacobson To: [email protected] Subject: ARP problem in Windows9X/NT Hello all bugtraqers! I've found a problem in Windows9X/NT's way of handeling ARP packets. If you flood a computer at your LAN with the packet below, it's user will be forced to...

macof.sniff.dos.switched.txt

Date: Wed, 5 May 1999 09:15:25 +0100 From: [email protected] To: [email protected] Subject: Infosec.19990305.macof.a Infosec Security Vulnerability Report No: Infosec.19990305.macof.a ===================================== Vulnerability Summary --------------------- Problem: Due to limitatio...

netbsd.arp.table.txt

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 1999-010 ================================= Topic: ARP table vulnerability Version: NetBSD-1.3 Severity: Denial of service or traffic hijacking from local network cable is possible Abstract ======== The implementation of ARP packet...

CVE-1999-0763

NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network...

CVE-1999-0764

NetBSD allows ARP packets to overwrite static ARP entries...

CVE-1999-0444

Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files...

CVE-1999-0667

The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service...

PT-1997-1000 · D Link +4 · Dsr-500 +7

Name of the Vulnerable Software and Affected Versions: Cisco IOS affected versions not specified Zyxel ZyWALL USG 300 affected versions not specified D-Link DSR-1000 affected versions not specified D-Link DSR-500 affected versions not specified D-Link DSR-250 affected versions not specified D-Lin...

SunOS 4.1.4 - arp(8c) Memory Dump

SunOS 4.1.4 - arp8c Memory Dump source: https://www.securityfocus.com/bid/291/info The version of arp8c which shipped with versions of SunOs 4.1.X could be used to dump system memory by using the -f flag. This flag causes the file filename to be read and multiple entries to be set in the ARP...

SunOS 4.1.4 - arp(8c) Memory Dump

source: https://www.securityfocus.com/bid/291/info The version of arp8c which shipped with versions of SunOs 4.1.X could be used to dump system memory by using the -f flag. This flag causes the file filename to be read and multiple entries to be set in the ARP tables. However, in this instance...