ZYXEL Prestige 681 SDSL Router - IP Fragment Reassembly

source: https://www.securityfocus.com/bid/3711/info Prestige is a product line of DSL routers produced and distributed by Zyxel. When a Zyxel router receives fragmented packets that after reassembly is greater than 64 kilobytes in length, the router crashes. The router must be power cycled to...

ZYXEL Prestige 681 SDSL Router - IP Fragment Reassembly

ZYXEL Prestige 681 SDSL Router - IP Fragment Reassembly source: https://www.securityfocus.com/bid/3711/info Prestige is a product line of DSL routers produced and distributed by Zyxel. When a Zyxel router receives fragmented packets that after reassembly is greater than 64 kilobytes in length, th...

CVE-2001-0862

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL...

CVE-2001-0863

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL Turbo ACL for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments...

Netscape/Mozilla и доступ к специальным файлам во всех OS (special device access)

При чтении html фрагмента вида img src="file:///dev/tty0" Netscape & Mozzilla подвешивают систему...

Microsoft IIS Source Fragment Disclosure

Microsoft IIS 4.0 and 5.0 can be made to disclose fragments of source code which should otherwise be inaccessible. This is done by appending '+.htr' to a request for a known '.asp' or '.asa', '.ini', 'etc' file. %NASLMINLEVEL 70300 Test Microsoft IIS 4.0/5.0 Source Fragment Disclosure Vulnerabili...

Уязвимость ipfilter (fragment caching filter bypass)

При проверке фрагментированного пакета не проверяются порты и флаги пакета, только адреса и ip id, если ip id имеется в кэше...

IPFilter 3.x - Fragment Rule Bypass

source: https://www.securityfocus.com/bid/2545/info IPFilter is a packet filtering implementation that is in wide use on a variety of Unix systems. There exists a vulnerability in IPFilter that can allow an attacker to communicate with blocked ports on hosts behind an IPFilter firewall. The...

IPFilter 3.x - Fragment Rule Bypass

IPFilter 3.x - Fragment Rule Bypass source: https://www.securityfocus.com/bid/2545/info IPFilter is a packet filtering implementation that is in wide use on a variety of Unix systems. There exists a vulnerability in IPFilter that can allow an attacker to communicate with blocked ports on hosts...

Serious bug in IPFilter

A VERY serious bug has been brought to my attention in IPFilter. In 10 words or less, fragment caching with can let through "any" packet. Ok, so that's 8. Cause ===== When matching a fragment, only srcip, dstip and IP ID are checked and the fragment cache is checked before any rules are checked. ...

CVE-2000-0310

IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets...

Дырка в inetd - ident (wheel file fragment reading)

Удаленно можно прочитать первые 16 символов кроме пробелов любого файла к которому имеет доступ группа wheel...

Check Point FireWall-1 allows fragmented packets through firewall if Fast Mode is enabled

Overview If any rules include the "Fast Mode" option, Check Point Firewall-1 and VPN-1 will incorrectly allow unauthorized connection attempts to hosts that should be restricted. Description A feature called "Fast Mode" or "FASTPATH", included in Check Point FireWall-1 and VPN-1 is designed to...

Check Point Software Firewall-1 4.1 SP2 - Fast Mode TCP Fragment

Check Point Software Firewall-1 4.1 SP2 - Fast Mode TCP Fragment // source: https://www.securityfocus.com/bid/2143/info Check Point Software's VPN-1 and Firewall-1 products contain a vulnerability in their "Fast Mode" option that may allow an attacker to bypass access control restrictions and...

Check Point Software Firewall-1 4.1 SP2 - Fast Mode TCP Fragment

// source: https://www.securityfocus.com/bid/2143/info Check Point Software's VPN-1 and Firewall-1 products contain a vulnerability in their "Fast Mode" option that may allow an attacker to bypass access control restrictions and access certain blocked services. Fast Mode is a setting that turns o...

CVE-2000-0630

IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability...

CVE-2000-0630

IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability...

Security Bulletin (MS00-044)

Microsoft Security Bulletin MS00-044 - -------------------------------------- Patch Available for "Absent Directory Browser Argument" Vulnerability Originally Posted: July 14, 2000 Summary ======= Microsoft has released a patch that eliminates two security vulnerabilities in Microsoftr Internet...

CVE-2000-0305

CVE-2000-0305 describes a remote DoS in Windows 95/98/2000/NT4/Terminal Server caused by sending large numbers of identical fragmented IP packets (the jolt2/IP Fragment Reassembly issue). The vulnerability arises from IP fragment processing and has been associated with Microsoft hotfix MS00-029 (...

MS00-029: NT IP Fragment Reassembly Patch Not Applied (jolt2) (259728)

The hotfix for the 'IP Fragment Reassembly' vulnerability has not been applied on the remote Windows host. This vulnerability allows an attacker to send malformed packets, which will utilize 100% of the computer CPU, making it nearly unusable for the legitimate users. C Tenable Network Security,...