CVE-2006-5479: Undefined Security Weakness

The NCP Engine in Novell eDirectory before 8.7.3.8 FTF1 allows remote attackers to cause an unspecified denial of service via a certain "NCP Fragment."...

[Full-disclosure] Microsoft SMB Information Disclosure Vulnerability CVE-2006-1315

McAfee, Inc. McAfee® Avert® Labs Security Advisory Public Release Date: 2006-07-11 SMB Information Disclosure Vulnerability CVE-2006-1315 • Synopsis An information disclosure vulnerability exists in the Server service that could allow an attacker to retrieve fragments of memory from an affected...

CentOS 3 : kernel (CESA-2005:293)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

Design/Logic Flaw

The enetprotocolhandlesendfragment function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including 1 Cube, 2 Sauerbraten, and 3 Duke3dw32, allows remote attackers to cause a denial of service application crash via a packet fragment with a large total data...

CVE-2006-1195

The enetprotocolhandlesendfragment function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including 1 Cube, 2 Sauerbraten, and 3 Duke3dw32, allows remote attackers to cause a denial of service application crash via a packet fragment with a large total data...

CVE-2006-1195: Undefined Security Weakness

The enetprotocolhandlesendfragment function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including 1 Cube, 2 Sauerbraten, and 3 Duke3dw32, allows remote attackers to cause a denial of service application crash via a packet fragment with a large total data...

Design/Logic Flaw

A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service crash via crafted packets that cause a packet fragment to be...

CVE-2006-0381

A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service crash via crafted packets that cause a packet fragment to be...

CVE-2006-0381

A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service crash via crafted packets that cause a packet fragment to be...

CVE-2006-0381

The CVE-2006-0381 entry describes a logic bug in pf's IP fragment cache that can cause a fragment to be inserted twice when using the pf rules scrub fragment crop or scrub fragment drop-ovl. Affected products include FreeBSD 5.3, 5.4, and 6.0, and OpenBSD. The impact is remote denial of service (...

CVE-2006-0381

A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service crash via crafted packets that cause a packet fragment to be...

[SA18609] FreeBSD "pf" IP Fragment Denial of Service Vulnerability

TITLE: FreeBSD "pf" IP Fragment Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18609 VERIFY ADVISORY: http://secunia.com/advisories/18609/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: FreeBSD 6.x http://secunia.com/product/6778/ FreeBSD 5.x...

CVE-2006-0381: Undefined Security Weakness

A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service crash via crafted packets that cause a packet fragment to be...

FreeBSD-SA-06:07.pf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:07.pf Security Advisory The FreeBSD Project Topic: IP fragment handling panic in pf4 Category: contrib Module: syscontrib Announced: 2006-01-25 Credits: Jakob...

pf -- IP fragment handling panic

Problem description: A logic bug in pf's IP fragment cache may result in a packet fragment being inserted twice, violating a kernel invariant. Impact: By sending carefully crafted sequence of IP packet fragments, a remote attacker can cause a system running pf with a ruleset containing a 'scrub...

PT-2006-1142 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD version 6.0-RELEASE Description: The issue allows remote attackers to cause a denial of service, leading to a firewall crash. This is achieved through ICMP IP fragments that match a reset, reject, or unreach action, resulting in acces...

FreeBSD-SA-06:04.ipfw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:04.ipfw Security Advisory The FreeBSD Project Topic: ipfw IP fragment denial of service Category: core Module: ipfw Announced: 2006-01-11 Credits: Oleg Bulyzhi...

CVE-2005-4723

D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service device reboot via a series of crafted fragmented UDP packets, possibly involving a missing fragment...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 2.1. This is the seventh regular update. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handl...

kernel security update

CentOS Errata and Security Advisory CESA-2005:293 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...