Kerio Personal Firewall 4.1.1 - Multiple IP Options Denial of Service Vulnerabilities

/ HOD-kerio-firewall-DoS-expl.c: 2004-11-10 Copyright c 2004 houseofdabus Kerio Personal Firewall Multiple IP Options Denial of Service PoC Coded by .:: houseofdabus ::. Bug discoveried by eEye: http://www.eeye.com/html/research/advisories/AD20041109.html...

EEYE: Kerio Personal Firewall Multiple IP Options Denial of Service

Kerio Personal Firewall Multiple IP Options Denial of Service Release Date: November 9, 2004 Date Reported: October 30, 2004 Severity: High Remote Denial of Service Vendor: Kerio Systems Affected: Kerio Personal Firewall 4.1.1 and prior Overview: eEye Digital Security has discovered a severe deni...

ROSE Attack (variation 2)

Exploit for unknown platform in category dos / poc ========================= ROSE Attack variation 2 ========================= / ROSE attack variation 2 chuck at lemure.net Discovered by: gandalf at digital.net code modified from large IGMP attack by: Kox by Coolio coolio at k-r4d.com Sends out...

ROSE Attack - Newdawn2

Exploit for unknown platform in category dos / poc ====================== ROSE Attack - Newdawn2 ====================== / ROSE attack chuck at lemure.net Discovered by: email protected code modified from large IGMP attack by: Kox by Coolio email protected Sends out first and last ICMP packet echo...

CVE-2004-0819

The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service crash via an ICMP echo ping packet...

CVE-1999-1201

Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service traffic amplification via a certain ICMP echo ping packet, which causes all stacks to send a ping response, aka TCP Chorusing...

CVE-2002-0630

The CVE-2002-0630 entry documents a vulnerability in the Telnet service of Polycom ViewStation, affected when running versions before 7.2.4. The issue allows remote attackers to cause a crash (denial of service) via long or malformed ICMP packets. No exploitation details or explicit remediation a...

CVE-2002-0630

The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service crash via long or malformed ICMP packets...

CVE-1999-1201

CVE-1999-1201 affects Windows 95/98 when multiple TCP/IP stacks are bound to the same MAC address. The condition allows a remote attacker to trigger traffic amplification by sending a particular ICMP echo, causing all stacks to reply to the same ping (TCP Chorusing). The vulnerability is document...

Vulnerability: OpenBSD 3.5 Kernel Panic.

Hi, I have posted this vulnerability note to CERT and gotten no response. It is remotely exploitable, but since it requires commands to be executed as root on the gateway machine, it is unlikely to cause any unplanned disruption. OpenBSD was contacted, and they provided a patch within 12 hours...

OpenBSD bridging ICMP DoS

If bridging is used, ICMP echo packet causes system to crash...

CVE-2004-0819

The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service crash via an ICMP echo ping packet...

Multiple Cisco ONS control cards fail to properly handle malformed ICMP packets

Overview A vulnerability exists in multiple control cards used by Cisco ONS devices. This vulnerability could allow a remote attacker to cause a denial-of-service condition. Description Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data...

RoseAttackv2.txt

/ ROSE attack variation 2 chuck at lemure.net Discovered by: gandalf at digital.net code modified from large IGMP attack by: Kox by Coolio coolio at k-r4d.com Sends out small IP fragments totalling up to a large ICMP packet. Then repeatedly sends last IP Fragment forcing reassembly code to traver...

CVE-2004-1060

Multiple TCP/IP and ICMP implementations, when using Path MTU PMTU discovery PMTUD, allow remote attackers to cause a denial of service network throughput reduction for TCP connections via forged ICMP "Fragmentation Needed and Don't Fragment was Set" packets with a low next-hop MTU value, aka the...

CVE-2003-1398

Cisco IOS 12.0 through 12.2, when IP routing is disabled, accepts false ICMP redirect messages, which allows remote attackers to cause a denial of service network routing modification...

OS Identification : ICMP

This plugin attempts to identify the Operating System type and version by sending more or less incorrect ICMP requests using the techniques outlined in Ofir Arkin's paper 'ICMP Usage In Scanning'. An attacker may use this to identify the kind of the remote operating system and gain further...

[Full-Disclosure] OSX 10.3 Personal Firewall.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Panther OSX 10.3 Firewall Configuration App OSX Personal Firewall gives false sense of security due to lack of ICMP and UDP protocol filtering. maki: br00t$ swvers ProductName: Mac OS X ProductVersion: 10.3 BuildVersion: 7B85 Quoting Apple:...

CVE-2003-0418

The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of unauthorized memory in ICMP error responses...

Cisco VPN 3000 Concentrator vulnerable to DoS via large number of malformed ICMP packets

Overview A vulnerability in some Cisco Virtual Private Network VPN products could allow a remote attacker to cause a denial of service. Description The Cisco VPN 3000 Series Concentrators and the Cisco VPN 3002 Hardware Clients are Virtual Private Network VPN platforms designed to provide secure...