CVE-2008-1095: Undefined Security Weakness

Unspecified vulnerability in the Internet Protocol IP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service panic via unknown vectors, possibly related to ICMP packets and IP fragment reassembly...

Nortel IP Phone DoS

Large fragmented ICMP packet causes device to crash...

Cisco Security Advisory: Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities Revision 1.0 For Public Release 2008 February 13 1600 UTC GMT +-------------------------------------------------------------------- Summary ======= Cisco...

Design/Logic Flaw

Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service reboot via a long ICMP echo request ping packet...

CVE-2008-0526

Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service reboot via a long ICMP echo request ping packet...

CVE-2008-0526: Improper Input Validation

Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service reboot via a long ICMP echo request ping packet...

A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"

Hello BugTraq Recently I've been looking at the OpenBSD PRNG implementation for DNS transaction ID OpenBSD ported BIND 9 into their code tree, but rolled their own PRNG for the DNS transaction ID field. I discovered a serious weakness in OpenBSD's PRNG, which allows an attacker to predict the nex...

Solaris 10 ICMP Packet Handling DoS

The remote host appears to be running a version of Solaris 10 that contains a vulnerability in its ICMP handling process that can be leveraged by an unauthenticated remote attacker to panic the affected host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

SunOS 5.10 Remote ICMP Kernel Crash Exploit

No description provided by source. / SunOS 5.10 Remote ICMP Kernel Crash Exploit by kcope Null Pointer Dereference in Kernel Space Seems to work only if attacked in the same network segment, maybe because of firewalls/routers in place. This seems to be the issue described in bid 22323. / include...

Sun Solaris ICMP DoS

Malformed ICMP packets cause system to crash...

SunOS 5.10 Remote ICMP Kernel Crash Exploit

Exploit for solaris platform in category dos / poc =========================================== SunOS 5.10 Remote ICMP Kernel Crash Exploit =========================================== / SunOS 5.10 Remote ICMP Kernel Crash Exploit by kcope Null Pointer Dereference in Kernel Space Seems to work only...

Microsoft Windows TCP/IP实现ICMP请求远程拒绝服务漏洞（MS08-001）

BUGTRAQ ID: 27139 CVECAN ID: CVE-2007-0066 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核的TCP/IP实现（tcpip.sys）中处理碎片路由器广播ICMP查询的方式实现上存在漏洞，远程攻击者可能利用此漏洞导致系统崩溃。 匿名攻击者可以通过在网络上向计算机特制的ICMP报文利用此漏洞，导致计算机停止响应和自动重新启动。但利用此漏洞所必须的ICMP路由发现协议（RDP）不是默认启用的。 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2...

SunOS 5.10 - Remote ICMP Kernel Crash

SunOS 5.10 - Remote ICMP Kernel Crash / SunOS 5.10 Remote ICMP Kernel Crash Exploit by kcope Null Pointer Dereference in Kernel Space Seems to work only if attacked in the same network segment, maybe because of firewalls/routers in place. This seems to be the issue described in bid 22323. / inclu...

SunOS 5.10 - Remote ICMP Kernel Crash

/ SunOS 5.10 Remote ICMP Kernel Crash Exploit by kcope Null Pointer Dereference in Kernel Space Seems to work only if attacked in the same network segment, maybe because of firewalls/routers in place. This seems to be the issue described in bid 22323. / include include include include include...

Microsoft Windows TCP/IP stack multiple security vulnerabilities

Memory corruption on IGMP/MLD processing, DoS on fragmented ICMP router discovery...

Microsoft Windows ICMP Fragmented Packet Denial of Service (MS08-001; CVE-2007-0066)

The Internet Control Message Protocol ICMP is one of the core protocols of the Internet protocol suite. The vulnerability is due to an error in the way that Windows Kernel processes fragmented router advertisement ICMP queries. Successful exploitation could allow a denial of service on the affect...

Out-of-bounds

The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol RDP is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel TCP/IP/ICMP...

CVE-2007-0066

The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol RDP is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel TCP/IP/ICMP...

CVE-2007-0066

The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol RDP is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel TCP/IP/ICMP...

CVE-2007-0066

CVE-2007-0066 describes a denial-of-service in the Windows kernel TCP/IP/ICMP handling when Router Discovery Protocol (RDP) is enabled. The vulnerability arises from how fragmented router advertisement ICMP queries are processed, potentially causing an out-of-bounds read and system unresponsivene...