GLSA-200705-18 : PPTPD: Denial of Service attack

The remote host is affected by the vulnerability described in GLSA-200705-18 PPTPD: Denial of Service attack James Cameron from HP has reported a vulnerability in PPTPD caused by malformed GRE packets. Impact : A remote attacker could exploit this vulnerability to cause a Denial of Service on the...

CVE-2007-0244

pptpgre.c in PoPToP Point to Point Tunneling Server pptpd before 1.3.4 allows remote attackers to cause a denial of service PPTP connection tear-down via 1 GRE packets with out-of-order sequence numbers or 2 certain GRE packets that are processed using a wrong pointer and improperly dequeued...

CVE-2007-0244

pptpgre.c in PoPToP Point to Point Tunneling Server pptpd before 1.3.4 allows remote attackers to cause a denial of service PPTP connection tear-down via 1 GRE packets with out-of-order sequence numbers or 2 certain GRE packets that are processed using a wrong pointer and improperly dequeued...

CVE-2007-0244

pptpgre.c in PoPToP Point to Point Tunneling Server pptpd before 1.3.4 allows remote attackers to cause a denial of service PPTP connection tear-down via 1 GRE packets with out-of-order sequence numbers or 2 certain GRE packets that are processed using a wrong pointer and improperly dequeued...

Debian DSA-1288-1 : pptpd - programming error

It was discovered that the PoPToP Point to Point Tunneling Server contains a programming error, which allows the tear-down of a PPTP connection through a malformed GRE packet, resulting in denial of service. The oldstable distribution sarge is not affected by this problem. %NASLMINLEVEL 70300 C...

DSA-1288-1 pptpd

Bulletin has no description...

Integer overflow

Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files...

CVE-2007-0251

Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files...

CVE-2007-0251

Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files...

CVE-2007-0251

CVE-2007-0251 affects Snort 2.6.1.2, where an integer underflow in DecodeGRE (src/decode.c) can cause dereferencing of certain memory locations when processing crafted GRE packets. This may lead to log file corruption or leakage of sensitive information into logs. Connected sources confirm the vu...

CVE-2007-0251

Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files...

CVE-2007-0251

Removed by vendor...

Snort GRE报文解码整数溢出漏洞

Snort是广泛部署的开放源码网络入侵检测系统（IDS）。很多其他IDS产品中也使用了Snort及其组件。 Snort的decode.c文件中DecodeGRE函数在解码GRE协议时存在整数溢出漏洞，攻击者可能利用此漏洞获取某些敏感信息。 漏洞相关代码如下： ==BEGIN CODE== ... line 3459 decode.c void DecodeGREuint8t pkt, const uint32t len, Packet p uint8t flags; uint32t hlen; / GRE header length / uint32t payloadlen;...

snort integer overflow

Signed integer type overflow on GRE protocol parsing...

Cisco IOS GRE报文路由选项解析溢出漏洞

Cisco互联网操作系统（IOS）是Cisco设备所使用的操作系统。 Cisco Systems IOS在解析包含有GRE源路由信息的GRE报文时存在漏洞，远程攻击者可能导致设备处理报文出错。 如果收到了特制的GRE报文的话，IOS设备没有验证偏移字段是否指向报文内，如果偏移值被设置为负值，IOS直接从包含有IP报文全长的整数中减去了偏移，导致缓冲区访问越界溢出。这可能导致将报文环缓冲区（ring buffer）的其他内存内容解释为负载IP报文并以很大的长度信息重新注入到路由队列中： GRE decapsulated IP 0.3.74.0-0.0.1.30 len=65407,...

CVE-2006-4650

Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which allows remote attackers...

CVE-2006-4650

Cisco IOS 12.0/12.1/12.2 GRE decapsulation vulnerability: missing RFC2784 fixes allow GRE offset overflow during decapsulation, enabling remote crafted packets to enter the routing queue and potentially bypass ACLs. Affected component is GRE IP tunneling handling; root cause is failure to verify ...

[Full-disclosure] RE: Cisco IOS GRE issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is a Cisco response to an advisory published by FX of Phenoelit posted as of September 06, 2006 at http://www.securityfocus.com/archive/1/445322/30/0/threaded, and entitled "Cisco Systems IOS GRE decapsulation fault". An official response ...

Cisco IOS access control lists bypass with GRE

Under some conditions it's possible to create GRE with payload to be forwarded from router's IP...

Cisco IOS GRE issue

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +---- Title Cisco Systems IOS GRE decapsulation fault Authors FX [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/CiscoGRE.txt Affected Products Cisco IOS Tested on: C3550 IOS 12.119 Cisco Bug ID...