PT-2012-4007

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.12 Wireshark versions 1.6.x through 1.6.7 Description The issue exists due to improper data alignment for certain structure members in Wireshark on SPARC and Itanium platforms. This allows remote attackers ...

CVE-2011-4012

Cisco IOS 12.0, 15.0, and 15.1, when a Policy Feature Card 3C PFC3C is used, does not create a fragment entry during processing of an ICMPv6 ACL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtj90091...

Code injection

Cisco IOS 12.0, 15.0, and 15.1, when a Policy Feature Card 3C PFC3C is used, does not create a fragment entry during processing of an ICMPv6 ACL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtj90091...

CVE-2011-4012

Cisco IOS 12.0, 15.0, and 15.1, when a Policy Feature Card 3C PFC3C is used, does not create a fragment entry during processing of an ICMPv6 ACL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtj90091...

CVE-2011-4012

Cisco IOS 12.0, 15.0, and 15.1 are affected when a Policy Feature Card 3C (PFC3C) is used. The vulnerability involves failure to create a fragment entry during processing of an ICMPv6 ACL, as described by Bug ID CSCtj90091. Reported impact is unspecified in the provided documents, and the vulnera...

PT-2012-1781

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0, 15.0, and 15.1 Description The issue is related to the processing of an ICMPv6 ACL when a Policy Feature Card 3C PFC3C is used. It does not create a fragment entry, which has unspecified impact and can be exploited...

CVE-2011-4012: Undefined Security Weakness

Cisco IOS 12.0, 15.0, and 15.1, when a Policy Feature Card 3C PFC3C is used, does not create a fragment entry during processing of an ICMPv6 ACL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtj90091...

Code injection

Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping. NOTE: due to a typ...

CVE-2010-4563

The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping...

CVE-2010-4563

The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping...

CVE-2010-4563

The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping...

CVE-2010-4563

The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping...

CVE-2010-4563

The Connected documents provide concrete detail for CVE-2010-4563: when the Linux kernel handles IPv6, an attacker can probe for sniffing by sending an ICMPv6 Echo Request to a multicast address and observing whether an Echo Reply is returned (as shown by thcping). This affects the Linux kernel’s...

CVE-2010-4563

The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping...

CVE-2010-4562

CVE-2010-4562 affects Microsoft Windows platforms when using IPv6. It allows remote attackers to infer if a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and observing an Echo Reply (as demonstrated by thcping). The entry notes a typographical collision: so...

PT-2012-1309

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is...

CVE-2010-4563: Exposure of Sensitive Information to an Unauthorized Actor

The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping...

CVE-2010-4562: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping. NOTE: due to a typ...

PT-2012-1308

Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping. NOTE: due to a typ...

Cisco IOS 指纹识别ICMPv6回应请求信息泄露漏洞

BUGTRAQ ID: 50379 CVE ID: CVE-2011-2059 Cisco的网际操作系统（IOS）是一个网际互连优化的复杂操作系统。数据流交互功能DLSw可以实现在IP网络上传输IBM SNA和网络BIOS流量。 Cisco IOS实现上存在信息泄露漏洞，通过包含有HBH扩展标头中PadN选项数据为0x0c01050c的ICMPv6 Echo请求报文，Cisco IOS中的IPv6组件允许远程攻击者执行指纹识别攻击并获取系统敏感信息。 Cisco IOS 15.x 厂商补丁： Cisco ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...