Re: NIS 2003 crash

On January 11, 2003 Pavel P. reported the following regarding Norton Internet Security 2003: ---------------snip-------------------------- Subject: NIS 2003 crash NIS2003 - I have WinXP Pro with SP1 and Norton Internet Security installed on my machine. When I ping my machine with the following...

Norton Internet Security DoS

Large ICMP echo-request packet causes system to crash...

Symantec Norton Internet Security 2003 - ICMP Packet Flood Denial of Service

Symantec Norton Internet Security 2003 - ICMP Packet Flood Denial of Service source: https://www.securityfocus.com/bid/6598/info Symantec Norton Internet Security 2003 is reported to be prone to a denial of service condition. It is possible to trigger this condition by sending an excessive...

Symantec Norton Internet Security 2003 - ICMP Packet Flood Denial of Service

source: https://www.securityfocus.com/bid/6598/info Symantec Norton Internet Security 2003 is reported to be prone to a denial of service condition. It is possible to trigger this condition by sending an excessive approximately 65500 or more number of ICMP packets to a host running Norton Interne...

Etherleak: Ethernet frame padding information leakage (A010603-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Etherleak: Ethernet frame padding information leakage Release Date: 01/06/2003 Application: Ethernet device driver software Platform: Multiple Severity: Information disclosure Authors: Ofir...

CVE-2002-0630

The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service crash via long or malformed ICMP packets...

CVE-2002-2315

Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a denial of service memory consumption via spoofed ICMP redirect packets to the router...

CVE-2002-1072

ZyXEL Prestige 642R 2.50FA.1 and Prestige 310 V3.25M.01, allows remote attackers to cause a denial of service via an oversized, fragmented "jolt" style ICMP packet...

CVE-2002-1072

ZyXEL Prestige 642R 2.50FA.1 and Prestige 310 V3.25M.01, allows remote attackers to cause a denial of service via an oversized, fragmented "jolt" style ICMP packet...

CVE-2002-1072

CVE-2002-1072 affects ZyXEL Prestige devices (642R and Prestige 310) due to a vulnerability in handling oversized, fragmented ICMP packets (jolt style). The issue allows remote attackers to induce a denial of service. The available sources confirm affected models and the general impact (availabil...

CVE-2002-0704

The Network Address Translation NAT capability for Netfilter "iptables" 1.2.6a and earlier leaks translated IP addresses in ICMP error messages...

CVE-2002-0574

Memory leak in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service memory exhaustion via ICMP echo packets that trigger a bug in ipoutput in which the reference count for a routing table entry is not decremented, which prevents the entry from being removed...

CVE-2002-0046

The CVE-2002-0046 vulnerability affects the Linux kernel (and possibly other OS) where remote attackers can read memory by sending fragmented ICMP packets that trigger an ICMP TTL Exceeded response containing memory fragments. This exposes partial confidentiality and relies on ICMP handling in th...

CVE-2002-0115

The CVE-2002-0115 entry concerns Snort 1.8.3, where the minimum ICMP header size is not properly defined. This allows remote attackers to cause a denial of service (crash and core dump) by sending a malformed ICMP packet. The documents state the affected component is the ICMP handling in Snort 1....

CVE-2002-0115

Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service crash and core dump via a malformed ICMP packet...

CVE-2002-0046

Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet...

CVE-2002-0237

Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a flood of large ICMP ping packets...

Microsoft Windows ICMP Type 9 Packet Remote DoS

It was possible to crash the remote machine by flooding it with ICMP type 9 packets. An attacker may use this attack to make this host crash continuously, preventing you from working. C Tenable Network Security, Inc. p-smash Script audit and contributions from Carmichael Security Erik Anderson...

Cisco 12000 Series Router ICMP Unreachable DoS

The remote device appears to be a Cisco 12000 Series router. According to its version number, it is vulnerable to a denial of service issue. Forcing it to send a large number of ICMP unreachable packets can slow down throughput. A remote attacker could use this to degrade the performance of the...

CVE-2002-0237

Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a flood of large ICMP ping packets...