Multiple Wireshark issues (CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)

packet-tcp.c in the TCP dissector in Wireshark formerly Ethereal 0.99.2 through 0.99.4 allows remote attackers to cause a denial of service application crash or hang via fragmented HTTP packets...

Authentication flaw

The Intrusion Prevention System IPS feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets...

CVE-2007-0917

The Intrusion Prevention System IPS feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets...

CVE-2007-0917

CVE-2007-0917 affects Cisco IOS IPS (IPS feature set) on IOS 12.4XE to 12.3T. The vulnerability allows remote attackers to bypass IPS signatures that use regular expressions by sending fragmented IP packets, potentially enabling evasion of signature inspection. Related Cisco advisories note addit...

CVE-2007-0917: Undefined Security Weakness

The Intrusion Prevention System IPS feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets...

Cisco Security Advisory: Multiple IOS IPS Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple IOS IPS Vulnerabilities Advisory ID: cisco-sa-20070213-iosips http://www.cisco.com/warp/public/707/cisco-sa-20070213-iosips.shtml Revision 1.0 For Public Release 2007 February 13 1600 UTC GMT -...

Linux kernel IPv6 filtering bypass

It's possible to bypass filtering by using fragmented packets...

Cisco Intrusion Prevention System DoS and protection bypass

Malformed SSLv2 handshake DoS, fragmented packets filtering evasion...

Cisco IPS fails to properly check fragmented IP packets

Overview Cisco IPS systems may fail to check specially-crafted IP packets that are fragmented. Description Some Cisco intrusion prevention system IPS products can be configured as passive intrusion detection systems IDS or active IPS systems. Cisco refers to the IPS mode as "inline" and the IDS...

security flaw

Linux SCTP lksctp before 2.6.17 allows remote attackers to cause a denial of service kernel panic via incoming IP fragmented 1 COOKIEECHO and 2 HEARTBEAT SCTP control chunks...

CVE-2006-0048

Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service segmentation fault via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread...

CVE-2006-0048

Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service segmentation fault via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread...

DEBIAN-CVE-2006-0048

Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service segmentation fault via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread...

CVE-2006-0048

Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service segmentation fault via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread...

CVE-2006-0048

Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service segmentation fault via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread...

CVE-2006-0048: Undefined Security Weakness

Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service segmentation fault via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread...

CVE-2006-0048

Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service segmentation fault via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread...

Design/Logic Flaw

The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths...

CVE-2006-0839

The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths...

CVE-2006-0839

The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths...