PT-2014-1308

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions 7.2, 7.3, and 7.4 before 7.4.110.0 Description The issue allows remote attackers to cause a denial of service, resulting in a device restart, by using specially crafted 802.11 Ethernet frames...

ESXi 5.0 < Build 515841 Multiple Vulnerabilities (remote check)

The remote VMware ESXi 5.0 host is affected by the following security vulnerabilities : - A security bypass vulnerability exists in the e1000 driver in the Linux kernel due to improper handling of Ethernet frames that exceed the MTU. An unauthenticated, remote attacker can exploit this, via...

Cisco Intrusion Prevention System Jumbo Frame Denial of Service (cisco-sa-20080618-ips)

According to its self-reported version, the version of the Cisco Intrusion Prevention System Software running on the remote host may be vulnerable to a denial of service DoS attack caused by a kernel panic. This is due to the handling of jumbo Ethernet frames when gigabit network interfaces are...

PT-2013-2989

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions on Nexus 7000 devices affected versions not specified Description The issue is related to the mishandling of nonstandard Ethernet frames by the Cisco NX-OS software, which can be exploited by an unauthenticated, remote...

broadcast-pppoe-discover NSE Script

Discovers PPPoE Point-to-Point Protocol over Ethernet servers using the PPPoE Discovery protocol PPPoED. PPPoE is an ethernet based protocol so the script has to know what ethernet interface to use for discovery. If no interface is specified, requests are sent out on all available interfaces. As...

SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 6779)

This update fixes various bugs and some security issues in the SUSE Linux Enterprise 10 SP 3 kernel. The following security issues were fixed : - drivers/net/e1000/e1000main.c in the e1000 driver in the Linux kernel handles Ethernet frames that exceed the MTU by processing certain trailing payloa...

Ubuntu: Security Advisory (USN-947-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux regression USN-947-2

Ubuntu Update for Linux kernel vulnerabilities USN-947-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN9472.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for linux regression USN-947-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.ne...

DSA-2053-1 linux-2.6 - several issues

Bulletin has no description...

CVE-2009-4536

drivers/net/e1000/e1000main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a craft...

Design/Logic Flaw

Unspecified vulnerability in Cisco Intrusion Prevention System IPS 5.x before 5.18E2 and 6.x before 6.05E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of service panic, and possibly bypass intended restrictions on network traffic, via a...

CVE-2008-2060

Cisco IPS Jumbo Frame DoS (CVE-2008-2060) affects Cisco Intrusion Prevention System versions 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2 when inline mode and jumbo Ethernet support are enabled. A specific sequence of jumbo Ethernet frames on a gigabit inline-deployed platform can cause a kernel p...

CVE-2008-2060: Undefined Security Weakness

Unspecified vulnerability in Cisco Intrusion Prevention System IPS 5.x before 5.18E2 and 6.x before 6.05E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of service panic, and possibly bypass intended restrictions on network traffic, via a...

CVE-2007-5729

The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow. NOTE: some sources have used...

Heap overflow

The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow. NOTE: some sources have used...

CVE-2007-5729

The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow. NOTE: some sources have used...

CVE-2007-2829

The 802.11 network stack in net80211/ieee80211input.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service system hang via a crafted length field in nested 802.3 Ethernet frames in Fast Frame packets, which results in a NULL pointer dereference...

etherleak.txt

!/usr/bin/perl -w etherleak, code that has been 5 years coming. On 04/27/2002, I disclosed on the Linux Kernel Mailing list, a vulnerability that would be come known as the 'etherleak' bug. In various situations an ethernet frame must be padded to reach a specific size or fall on a certain...