Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (1)

// source: https://www.securityfocus.com/bid/11258/info Multiple vendor implementations of the TCP stack are reported prone to a remote denial-of-service vulnerability. The issue is reported to present itself due to inefficiencies present when handling fragmented TCP packets. The discoverer of th...

CVE-2003-0033

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets...

CVE-2002-1779

The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 NPW does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 CVE-2000-0305...

SurfControl SuperScout does not filter web requests fragmented in multiple packets

Overview SurfControl SuperScout Web Filter does not block some HTTP requests that have been fragmented into multiple packets. Description SurfControl SuperScout Web Filter is software intended for companies that wish to limit employees' web surfing to appropriate uses. SuperScout anazlyzes...

DoS against Windows and other systems

A number of fragmented packet cause host to freeze during the attack...

Zyxel Prestige DoS

Problems with fragmented packets processing, Syn+fin and Syn+ack packets...

CVE-2001-1194

Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with 1 an IP length less than actual packet size, or 2 fragmented packets whose size exceeds 64 kilobytes after reassembly...

CVE-2001-0822

FPF kernel module 1.0 allows a remote attacker to cause a denial of service via fragmented packets...

CVE-2001-0865

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access...

CVE-2001-0822

Technical details about CVE-2001-0822 are not publicly provided in the supplied documents. Please monitor for updates from the sources for any new disclosures or technical specifics.

CVE-2001-1540

IPRoute 0.973, 0.974 and 1.18 allows remote attackers to cause a denial of service via fragmented IP packets that split the TCP header...

ZYXEL Prestige 681 SDSL Router - IP Fragment Reassembly

source: https://www.securityfocus.com/bid/3711/info Prestige is a product line of DSL routers produced and distributed by Zyxel. When a Zyxel router receives fragmented packets that after reassembly is greater than 64 kilobytes in length, the router crashes. The router must be power cycled to...

ZYXEL Prestige 681 SDSL Router - IP Fragment Reassembly

ZYXEL Prestige 681 SDSL Router - IP Fragment Reassembly source: https://www.securityfocus.com/bid/3711/info Prestige is a product line of DSL routers produced and distributed by Zyxel. When a Zyxel router receives fragmented packets that after reassembly is greater than 64 kilobytes in length, th...

CVE-2001-0865

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access...

IPRoute Fragmentation Denial of Service Vulnerability

IPRoute Fragmentation Denial of Service Vulnerability by Chris Gragsone and The TechnoDragon Foot Clan Date: December 2, 2001 Advisory ID: Foot-20011202 Impact of vulnerability: Denial of Service Exploitable: Remotely Maximum Risk: Moderate Affected Software: IPRoute v1.18 IPRoute v0.974 IPRoute...

CVE-2001-0402

IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port...

DoS проти DLINK (fragment flood)

Флуд фрагментированными пакетами приводит к отказу маршрутизаторов...

DoS против *BSD (fragmented packets flood)

Флуд фрагментироваными пакетами приводит к отказу сервера...

FreeBSD-SA-01:52.fragment

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:52 Security Advisory FreeBSD, Inc. Topic: Denial of service using fragmented IPv4 packets Category: kernel Announced: 2001-08-06 Credits: "James Thomas" via NetBSD...

CVE-2001-0402

IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port...