CVE-2006-2240

CVE-2006-2240 concerns an unspecified vulnerability in the Fujitsu NetShelter/FW web cache or web proxy. The issue reportedly allows remote attackers to cause a denial of service resulting in device unresponsiveness, via certain DNS packets, as demonstrated by the OUSPG PROTOS DNS test suite. The...

Raptor FW version 6.5 detection

By sending an invalid HTTP request to an webserver behind Raptor firewall, the http proxy itself will respond. The server banner of Raptor FW version 6.5 is always 'Simple, Secure Web Server 1.1' You should avoid giving an attacker such information. OpenVAS Vulnerability Test $Id: raptordetect.na...

Service Detection with 'HELP' Request

This plugin performs service detection. SPDX-FileCopyrightText: 2005 Michel Arboi SPDX-FileCopyrightText: New detection methods / pattern / code since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2005-1717

The CVE-2005-1717 entry concerns ZyXEL Prestige 650R-31 routers running ZyNOS FW v3.40(KO.1). Affected component: the device’s IP stack handling of fragmented packets. Root cause: crafted fragmented IP packets that lead to denial of service via sustained CPU usage and network loss. Impact: remote...

CVE-2005-1717

ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40KO.1 allows remote attackers to cause a denial of service CPU consumption and network loss via crafted fragmented IP packets...

Check Point FW-1 Syslog Daemon - Unfiltered Escape Sequence

source: https://www.securityfocus.com/bid/7161/info An issue has been discovered in Check Point FW-1 syslog daemon when attempting to process a malicious, remotely supplied, syslog message. Specifically, some messages containing escape sequences are not properly filtered out. This may result in...

FW-1 IP Fragmentation Vulnerability

DISCLAIMER It was never my intent to identify a DoS attack on FW-1. I was attempting to research and understand how FW-1 handles IP Fragmentation. Everthing that follows is a result of that research. Full findings of my research can be found at http://www.enteract.com/lspitz/fwtable.html...