CVE-2006-4265

CVE-2006-4265 affects Kaspersky Anti-Hacker 1.8.180 where enabling Stealth Mode permits remote attackers to obtain ICMP responses for timestamp and netmask requests, contrary to Stealth Mode documentation. The issue exposes partial confidentiality (unauthorized ICMP data exposure) without details...

Linux Kernel ICMP_Push_Reply远程拒绝服务漏洞

BUGTRAQ ID: 16044 CVECAN ID: CVE-2005-3848 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在处理ICMP通讯时存在漏洞，远程攻击者可能利用此漏洞导致主机拒绝服务。 如果icmppushreply中的ipappenddata调用失败的话，就必须调用ipflushpendingframes。否则，inetskicmpsocket-sk-cork.rt就不会调用iprtput，导致无法释放路由和netdevice。远程攻击者可以通过发送大量特制报文导致耗尽所有内存。 Linux kernel =...

Kaspersky Anti-Hacker protection bypass

Few kinds of ICMP messages are still accepted and replied in stealth mode. It makes it possible system fingerprinting...

Kaspersky Anti-Hacker personal firewall unstealthy stealth mode

Kaspersky personal firewall 1.8.180 in "stealth mode" configuration doesnt detect nor block timestamp and network block ICMP request. They still call it a stealth mode feature, yeah sure ; Try: nmap -sP -PE IP namp -sP -PM IP...

CentOS 4 : kernel (CESA-2006:0101)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

Microsoft Windows - TCP/IP Protocol Driver Remote Buffer Overflow

/ Windows TCP/IP source routing poc C version... by Preddy RootShell Security Group Shoutz 2: Jimmy and ByteCoder + Rs Crew + Rest of the world :D Compile: gcc win-tcpip-dos.c -o wintcpipdos Info: Published: 14.06.2006 Source: ANDREYMINAEV Type: remote Level: 9/10 Buffer overflow on ICMP packets...

MS Windows TCP/IP Protocol Driver Remote Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ================================================================ MS Windows TCP/IP Protocol Driver Remote Buffer Overflow Exploit ================================================================ / Windows TCP/IP source routing poc C version... by...

Windows ICMP DoS (potential code execution)

Buffer overflow on ICMP packets with Loose Source and Record Route IP options. Short message translation: There are DoS conditions in Windows 2000 built-in NAT server. Tested configuration: Windows 2000 English Standard/Advanced Service Pack 4 + Update Rollup 1 for Service Pack 4 with NAT server...

CVE-2006-1651

Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for 1 ICMP and 2 TCP, via IPv6 packets. NOTE: An established researcher has disputed this issue, saying that "Neither ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6 filtering ... This...

Malformed ICMP Packets May Cause a Denial of Service (SCTP)

It is possible to crash the remote host by sending it malformed ICMP packets. Description : Linux Kernels older than version 2.6.13 contains a bug which may allow an attacker to cause a NULL pointer dereference by sending malformed ICMP packets, thus resulting in a kernel panic. This flaw is...

Microsoft Windows XP2003 - IGMP v3 Denial of Service (MS06-007) (2)

Microsoft Windows XP2003 - IGMP v3 Denial of Service MS06-007 2 / MS06-007 Denial of Service POC exploit created by Firestorm, based on zloSend.exe win32 exploit http://www.securitylab.ru/poc/264136.php Tested on Windows XP SP2 as victim compiled/runned on Fedore Core 4 x86 FOR EDUCATIONAL PURPOS...

Ubuntu 5.10 : linux-source-2.6.12 vulnerability (USN-250-1)

Herbert Xu discovered a remote Denial of Service vulnerability in the ICMP packet handler. In some situations a memory allocation was released twice, which led to memory corruption. A remote attacker could exploit this to crash the machine. Note that Tenable Network Security has extracted the...

USN-250-1: Linux kernel vulnerability

Herbert Xu discovered a remote Denial of Service vulnerability in the ICMP packet handler. In some situations a memory allocation was released twice, which led to memory corruption. A remote attacker could exploit this to crash the machine...

ICMP Domain Name Request

The remote host answered to an ICMP 'Domain Name Request' as defined in RFC 1788. Such a request is designed to obtain the DNS name of a host based on its IP. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: RFC 1788 http://www.dolda2000.com/fredrik/icmp-dn/...

[SA18766] Linux Kernel ICMP Error Handling Denial of Service

TITLE: Linux Kernel ICMP Error Handling Denial of Service SECUNIA ADVISORY ID: SA18766 VERIFY ADVISORY: http://secunia.com/advisories/18766/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719/ DESCRIPTION: A...

Linux kernel ICMP DoS

record-route or timestamp IP options handling vulnerability...

CVE-2006-0454

Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmpsend, does not properly handle when the ipoptionsecho function in icmp.c fails, which allows remote attackers to cause a denial of service crash via vectors such as 1 record-route and 2 timestamp IP options wi...

Code injection

Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmpsend, does not properly handle when the ipoptionsecho function in icmp.c fails, which allows remote attackers to cause a denial of service crash via vectors such as 1 record-route and 2 timestamp IP options wi...

CVE-2006-0454

Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmpsend, does not properly handle when the ipoptionsecho function in icmp.c fails, which allows remote attackers to cause a denial of service crash via vectors such as 1 record-route and 2 timestamp IP options wi...

CVE-2006-0454

Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmpsend, does not properly handle when the ipoptionsecho function in icmp.c fails, which allows remote attackers to cause a denial of service crash via vectors such as 1 record-route and 2 timestamp IP options wi...