CVE-2010-1612

The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service interface outage...

MagnetoSoft ICMP Active-X AddDestinationEntry Buffer Overflow

'Magneto Software ICMP ActiveX Control Buffer Overflow 'Discovered by: s4squatch 'website: www.securestate.com 'Date Discovered: 03/11/09 'Exploit Written: 02/02/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified: 02/11/10 -- NO RESPONSE 'Vendor Notified: 02/17/10 -- NO RESPONSE...

MagnetoSoft DNS Active-X DNSLookupHostWithServer Proof Of Concept

'Magneto Software ActiveX Control ICMP Crash POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified: 02/11/10 -- NO RESPONSE 'Vendor Notified: 02/17/10 -- NO RESPONSE 'Published 04/13/10 'www:...

MagnetoSoft DNS 4.0.0.9 - ActiveX DNSLookupHostWithServer (PoC)

MagnetoSoft DNS 4.0.0.9 - ActiveX DNSLookupHostWithServer PoC 'Magneto Software ActiveX Control ICMP Crash POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified: 02/11/10 -- NO RESPONSE 'Vendor Notified:...

MagnetoSoft ICMP 4.0.0.18 - ActiveX AddDestinationEntry Buffer Overflow

'Magneto Software ICMP ActiveX Control Buffer Overflow 'Discovered by: s4squatch 'website: www.securestate.com 'Date Discovered: 03/11/09 'Exploit Written: 02/02/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified: 02/11/10 -- NO RESPONSE 'Vendor Notified: 02/17/10 -- NO RESPONSE...

MagnetoSoft ICMP 4.0.0.18 - ActiveX AddDestinationEntry Buffer Overflow

MagnetoSoft ICMP 4.0.0.18 - ActiveX AddDestinationEntry Buffer Overflow 'Magneto Software ICMP ActiveX Control Buffer Overflow 'Discovered by: s4squatch 'website: www.securestate.com 'Date Discovered: 03/11/09 'Exploit Written: 02/02/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified:...

MagnetoSoft ICMP ActiveX AddDestinationEntry BOF

Exploit for windows platform in category remote exploits ================================================ MagnetoSoft ICMP ActiveX AddDestinationEntry BOF ================================================ 'Magneto Software ICMP ActiveX Control Buffer Overflow 'Discovered by: s4squatch 'website:...

ICMP Node Information Query Information Disclosure

The remote host answers to an ICMPv6 Node Information Query and responds with its DNS name, the list of IPv4 addresses and the list of IPv6 addresses to which it is bound. An attacker can use this information to understand how the network is architected, which may help him bypass filters. TRUSTED...

Multiple Vendor ICMP Connection Reset Denial of Service (CVE-2004-0790)

The Internet Control Message Protocol ICMP is part of the Internet Protocol suite. ICMP facilitates error, control, and informational message exchange between network devices. For instance, ICMP may be used to test network connectivity between two hosts. There exists a vulnerability in multiple...

Multiple Vendor ICMP Source Quench Denial of Service (CVE-2004-0791)

The Internet Control Message Protocol ICMP is part of the Internet Protocol suite. ICMP facilitates error, control, and informational message exchange between network devices. For instance, ICMP may be used to test network connectivity between two hosts. There exists a vulnerability in multiple...

kernel: rt_cache leak leads to lack of network connectivity

The icmpsend function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache aka DST in some situations involving transmission of an ICMP Host Unreachable message, which allows remo...

IBM Datapower XS40畸形ICMP报文拒绝服务漏洞

Bugraq ID: 37952 IBM Datapower XS40是一款安全网关解决方案。 IBM Datapower XS40设备不正确处理ICMP畸形报文，远程攻击者可以利用漏洞使设备挂起，造成拒绝服务攻击。 发送IP目的地址为0.0.0.0的ICMP报文到QLOGIC接口，可使接口变慢，多次发送此类报文数据可导致服务停止响应。 IBM Datapower XS40 3.7.2.1 用户可参考如下安全公告获得补丁信息： http://www-01.ibm.com/support/docview.wss?rs=2362&uid=swg1IC61364...

IBM DataPower XS40 security gateway DoS

ICMP packet with destination address 0.0.0.0 causes device to hang...

Rogue Gateway Detection: Sender

This module send a series of TCP SYN and ICMP ECHO requests to each internal target host, spoofing the source address of an external system running the roguerecv module. This allows the system running the roguerecv module to determine what external IP a given internal system is using as its defau...

Rogue Gateway Detection: Receiver

This module listens for replies to the requests sent by the roguesend module. The RPORT, CPORT, and ECHOID values must match the roguesend parameters used exactly. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

CVE-2009-3641

Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service application crash via a crafted IPv6 packet that uses the 1 TCP or 2 ICMP protocol...

Design/Logic Flaw

Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service application crash via a crafted IPv6 packet that uses the 1 TCP or 2 ICMP protocol...

CVE-2009-3641

Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service application crash via a crafted IPv6 packet that uses the 1 TCP or 2 ICMP protocol...

CVE-2009-3641

Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service application crash via a crafted IPv6 packet that uses the 1 TCP or 2 ICMP protocol...

CVE-2009-3641

The CVE-2009-3641 issue affects Snort 2.8.5.1 (and earlier) where a specially crafted IPv6 packet using -v triggers a crash (DoS). Fedora advisories (2009-10751/10783) document updating to 2.8.5.1 to fix the DoS and provide context that the vulnerability is triggered by printing IPv6 packets. Ope...