Spoofing

Send ICMP Nasty Garbage sing on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L output log file option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to overrid...

CVE-2007-6211

Send ICMP Nasty Garbage sing on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L output log file option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to overrid...

CVE-2007-6211

The CVE-2007-6211 issue affects Debian GNU/Linux’s sing utility. It allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. The vulnerability is noted as limited in scope because sing is not installed setuid by default, so exploitation requires ove...

sing (debian) vunlerability?

Hello, The sing utility Send Nasty ICMP Garbage is a ping replacement that allows sending ICMP packets with spoofed source and custom ICMP types/codes http://sourceforge.net/projects/sing. The debian package provides sing as a suid binary actually, the sid distribution asks the user whether he'd...

Design/Logic Flaw

Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and remote attack vectors, related to ICMP packets that are "incorrectly accepted."...

CVE-2007-6097

Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and remote attack vectors, related to ICMP packets that are "incorrectly accepted."...

CVE-2007-6098

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated 1 ICMP, 2 UDP, and 3 TCP packets, which has unknown impact and remote attack vectors; and do not log 4 serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical acce...

CVE-2007-6097

Affected products: Ingate Firewall (before 4.6.0) and SIParator (before 4.6.0). The vulnerability lies in their ICMP implementation, with the issue described as ICMP packets being “incorrectly accepted.” The impact is not explicitly quantified in the provided documents, but the CVE notes unknown ...

CVE-2007-6097

Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and remote attack vectors, related to ICMP packets that are "incorrectly accepted."...

CVE-2002-2315

The vulnerability CVE-2002-2315 affects Cisco IOS 11.2.x and 12.0.x, where the redirect table can grow without bound, enabling remote DoS via spoofed ICMP redirect packets to the router. Connected sources corroborate the issue and indicate a memory exhaustion vector caused by ICMP redirects. Impa...

CVE-2003-1398

CVE-2003-1398 affects Cisco IOS 12.0–12.2 when IP routing is disabled. The vulnerability allows remote attackers to cause a denial of service by sending false ICMP redirect messages, which can modify network routing. Connected sources corroborate the issue as a router-directed DoS via ICMP redire...

Nmap advanced usage guide-vulnerability warning-the black bar safety net

Now with Nmap when HOU found Nmap tips Happy 10th Birthday to Nmap, may it live to be 1 1 0! It's been 1 0 years old birthday, perhaps you can can live to be 1 1 0 years olddidn't think 9 7 years 9 months 1 day it was born the day of 1 0 years of grinding sword. In honor of this great port scanne...

CVE-2007-4213

Palm OS on Treo 650, 680, 700p, and 755p Smart phones allows remote attackers to cause a denial of service device reset or hang via a flood of large ICMP echo requests. NOTE: this is probably a different vulnerability than CVE-2003-0293...

Palm Treo智能手机远程拒绝服务漏洞

BUGTRAQ ID: 25074 CVECAN ID: CVE-2007-4213 Treo系列是运行Palm操作系统的智能手机。 Treo手机在处理ICMP请求时存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。 如果运行Palm操作系统的Treo手机连接到了数据网络并允许入站ICMP通讯的话，攻击者就可以通过向为手机所分配的IP地址连续发送大小为1470字节的ICMP回显请求导致设备待机、软重启或断开连接。降低报文大小但增加发送间隔时间也可以实现同样的效果。 Palm Treo Smartphone 755p Palm Treo Smartphone 700p Palm Treo...

SYMSA-2007-007: Palm OS Treo Smartphone Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-007 Advisory Title: Palm OS Treo Smartphone Denial of Service Authors: J.R. Wikes Release Date: 20-08-2007 Application: N/A Platforms: Palm Treo...

ICMP flood DoS against PalmOS

ICMP flood causes device to fail temporary...

SOL4583 - Insufficient validation of ICMP error messages - VU#222750 / CVE-2004-0790

This vulnerability describes the use of spoofed ICMP packets to affect existing TCP connections. An attacker could cause a TCP connection to be closed or slowed by interfering with the Path MTU Discovery process or by generating one of the following spoofed ICMP messages: Destination unreachable...

Hack advanced skills Linux back door technology and practice-vulnerability warning-the black bar safety net

The back door introduction The intruder complete control of the system, to facilitate the next time you enter and use a technology. Generally by modifying system configuration files and installation of third-party back-door tool to achieve. Has a hidden, can bypass the system log, not easy to be...

HP-UX ICMP vulnerable to DoS via ICMP Path Maximum Transmission Unit (PMTU) Discovery

Overview A vulnerability in HP-UX may allow a remote attacker to cause a denial of service by sending a specially crafted ICMP packet. Description A number of widely accepted Internet standards describe different aspects of the relationships between the Internet Control Message Protocol ICMP and...

Design/Logic Flaw

Cisco Unified CallManager CUCM 5.0 before 5.04aSU1 and Cisco Unified Presence Server CUPS 1.0 before 1.03 allow remote attackers to cause a denial of service loss of voice services via a flood of ICMP echo requests, aka bug ID CSCsf12698...