CVE-2001-0323

The ICMP path MTU PMTU discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing "ICMP Fragmentation needed but Don't Fragment DF set" packets between two target hosts, which could cause one host to lower its MTU when transmitting to the other host...

CVE-2001-0411

CVE-2001-0411 affects Reliant Unix 5.44 and earlier. The vulnerability allows remote attackers to cause a denial of service by sending an ICMP port unreachable packet, causing Reliant to drop all connections to the packet’s source address. Available records indicate a network-remote impact with p...

CVE-2001-0411

Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant to drop all connections to the source address of the packet...

CVE-2001-0411: Undefined Security Weakness

Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant to drop all connections to the source address of the packet...

CVE-2001-0057

Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo ping packet...

CVE-2001-0057

CVE-2001-0057 affects Cisco 600 routers running CBOS 2.4.1 and earlier. The vulnerability allows remote attackers to cause a denial of service by sending a large ICMP echo (ping) packet. The available documents do not specify exploitation details, affected software versions beyond CBOS 2.4.1 and ...

CVE-2001-0057: Undefined Security Weakness

Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo ping packet...

def-2001-18: Watchguard Firebox II Kernel DoS

====================================================================== Defcom Labs Advisory def-2001-18 Watchguard Firebox II Kernel DoS Authors: Andreas Sandor [email protected] Peter Grьndl [email protected] Release Date: 2001-04-05...

CVE-2001-0323

The CVE-2001-0323 entry describes a denial-of-service risk in the ICMP path MTU (PMTU) discovery feature used by various UNIX systems. The underlying issue is that remote attackers can spoof ICMP messages of type “Fragmentation needed but Don’t Fragment (DF) set” between two hosts, potentially ca...

CVE-2001-0323

The ICMP path MTU PMTU discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing "ICMP Fragmentation needed but Don't Fragment DF set" packets between two target hosts, which could cause one host to lower its MTU when transmitting to the other host...

CVE-2001-0323: Undefined Security Weakness

The ICMP path MTU PMTU discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing "ICMP Fragmentation needed but Don't Fragment DF set" packets between two target hosts, which could cause one host to lower its MTU when transmitting to the other host...

CVE-2001-0057

Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo ping packet...

ICMP fragmentation required but DF set problems.

Hi all, The problem I'm exposing is quite obvious, but unfortunatelly can be used in a very simple way by script kiddies. SYNOPSIS It's possible to slowdown a lot connections between two arbirary hosts but at least one with the PMTU discovery enabled using some spoofed TCP/IP packet. Maybe you ca...

Re: ICMP fragmentation required but DF set problems.

This is a valid method, and known, to slow down a link between two hosts. In my paper "ICMP Usage In Scanning" currently version 2.5 Appendix B: ICMP "Fragmentation Needed but the Don't Fragment Bit was set" and the Path MTU Discovery Process Page 132, I have outlined what should be done accordin...

CVE-2000-0882

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash...

CVE-2000-0882

CVE-2000-0882 affects Intel Express 500 series switches. The vulnerability allows a remote attacker to trigger a Denial of Service by sending a malformed ICMP packet, causing the switch CPU to crash. The available sources (NVD/NIST CVE listing) confirm the affected product and impact as described...

CVE-2000-0882

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash...

CVE-2000-0882: Undefined Security Weakness

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash...

CVE-1999-1563

Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm...

CVE-2000-0451

CVE-2000-0451 concerns the Intel Express 8100 ISDN router, where remote attackers can cause a denial of service by sending oversized or fragmented ICMP packets. The available connected metadata confirms the affected device and the specific attack vector (ICMP amplification/fragmentation) that lea...