2909 matches found
CVE-2007-3798
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...
Integer overflow
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...
CVE-2007-3798
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...
CVE-2007-3798
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...
DEBIAN-CVE-2007-3798
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...
CVE-2007-3798
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...
CVE-2007-3798
CVE-2007-3798 affects tcpdump’s BGP dissector: an integer overflow in print-bgp.c in tcpdump 3.9.6 and earlier allows remote code execution via crafted BGP TLVs. Impact: arbitrary code execution with the pcap user’s privileges when processing BGP packets. Remediation is via updated tcpdump packag...
CVE-2007-3798
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...
PT-2007-1107 · Tcpdump +1 · Tcpdump +1
Name of the Vulnerable Software and Affected Versions: tcpdump versions 3.9.6 and earlier tcpdump versions prior to 3.9.5-r3 Description: The issue is related to an integer overflow in the BGP dissector in tcpdump, which allows remote attackers to execute arbitrary code via crafted TLVs in a BGP...
CVE-2007-3798: Unchecked Return Value
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...
Debian DSA-1293-1 : quagga - out of boundary read
Paul Jakma discovered that specially crafted UPDATE messages can trigger an out of boundary read that can result in a system crash of quagga, the BGP/OSPF/RIP routing daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
[SECURITY] [DSA 1293-1] New quagga packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1293-1 [email protected] http://www.debian.org/security/ Martin Schulze May 17th, 2007 http://www.debian.org/security/faq -...
DSA-1293-1 quagga
Bulletin has no description...
GLSA-200705-05 : Quagga: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200705-05 Quagga: Denial of Service The Quagga development team reported a vulnerability in the BGP routing deamon when processing NLRI attributes inside UPDATE messages. Impact : A malicious peer inside a BGP area could send a...
Quagga: Denial of service
Background Quagga is a free routing daemon, supporting RIP, OSPF and BGP protocols. Description The Quagga development team reported a vulnerability in the BGP routing deamon when processing NLRI attributes inside UPDATE messages. Impact A malicious peer inside a BGP area could send a specially...
Quagga bgpd BGP service DoS
Denial of service on BGP UPDATE messages processing...
CVE-2007-1995
Removed by vendor...
Cisco IOS特制TCP报文远程拒绝服务漏洞
Cisco IOS是Cisco设备所使用的操作系统。 Cisco IOS在处理特定畸形的TCP报文时存在漏洞，远程攻击者可能利用此漏洞对设备执行拒绝服务攻击，导致设备耗尽所有内存无法正常工作。 如果将Cisco IOS设备配置为接收TCP报文的话，则发送给Cisco IOS设备物理或虚拟接口IPv4地址的特制报文就可能导致泄漏少量的内存。这种内存泄漏可能造成耗尽内存资源，降低系统的性能。 请注意攻击者无需完成TCP三重握手就可以触发这个漏洞，因此伪造源址的TCP报文也可以完成攻击。这个漏洞仅适用于目标为Cisco IOS设备的通讯，穿越Cisco IOS设备的通讯不会触发这个漏洞。...
Debian DSA-1059-1 : quagga - several vulnerabilities
Konstantin Gavrilenko discovered several vulnerabilities in quagga, the BGP/OSPF/RIP routing daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-2223 Remote attackers may obtain sensitive information via RIPv1 REQUEST packets even if the quagga...
