CVE-2011-2059

The ipv6 component in Cisco IOS before 15.14M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop HBH extension header EH with a 0x0c01050...

Design/Logic Flaw

The ipv6 component in Cisco IOS before 15.14M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop HBH extension header EH with a 0x0c01050...

CVE-2011-2059

The ipv6 component in Cisco IOS before 15.14M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop HBH extension header EH with a 0x0c01050...

CVE-2011-2059

The CVE-2011-2059 issue affects Cisco IOS IPv6: the IPv6 component is vulnerable to fingerprinting/information disclosure via an ICMPv6 Echo Request containing a Hop-by-Hop extension header with PadN data 0x0c01050c. Affected: Cisco IOS prior to 15.1(4)M1.3. Impact described as potential exposure...

PT-2011-3566

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.14M1.3 Description The issue allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet...

CVE-2011-2059: Exposure of Sensitive Information to an Unauthorized Actor

The ipv6 component in Cisco IOS before 15.14M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop HBH extension header EH with a 0x0c01050...

CVE-2011-3282

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155...

Code injection

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155...

CVE-2011-3282

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155...

CVE-2011-3282

Summary: CVE-2011-3282 is a Cisco IOS/IOS XE vulnerability where MPLS + IPv6 traffic can cause a device to reload via crafted ICMPv6/IPv6 packets. Affected: Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, 15.1; Cisco IOS XE 2.1.x through 3.3.x, with MPLS configured. Impact: remote denial of service ...

CVE-2011-3282: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155...

PT-2011-1005

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2SRE before 12.233SRE4 Cisco IOS versions 15.0 and 15.1 Cisco IOS XE versions 2.1.x through 3.3.x Description The issue allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to a...

Wireshark 1.4.9 & Wireshark 1.6.2 updated version released

Wireshark 1.4.9 & Wireshark 1.6.2 updated version released Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education. The following bugs have been fixed: configure ignores partially LDFLAGS. Bug 5607 Build fails when it...

targets-ipv6-multicast-echo NSE Script

Sends an ICMPv6 echo request packet to the all-nodes link-local multicast address ff02::1 to discover responsive hosts on a LAN without needing to individually ping each IPv6 address. Script Arguments newtargets If true, add discovered targets to the scan queue...

targets-ipv6-multicast-invalid-dst NSE Script

Sends an ICMPv6 packet with an invalid extension header to the all-nodes link-local multicast address ff02::1 to discover some available hosts on the LAN. This works because some hosts will respond to this probe with an ICMPv6 Parameter Problem packet. Script Arguments newtargets If true, add...

Cisco routers Router Advertisement Guarding protection bypass

It's possible to bypass protection with fragmented ICMPv6 packet...

Bypassing Cisco's ICMPv6 Router Advertisement Guard feature

To bypass the Router Advertisement Guarding feature in the very few Cisco switches and images that support it: Attack: ======= Make the evil Router Advertisement fragmented and put the ICMPv6 into the second fragment, eg. by putting a very large Destination extension header before the ICMPv6 part...

ICMPv6 Router Announcement flooding denial of service affecting multiple systems

This security advisory is released because Microsoft doesnt want to fix the issue. Cisco did for its IOS and ASA within 3 months. Title: ICMPv6 Router Announcement flooding denial of service affecting multiple systems Date: 05 April 2011 URL:...

Multiple systems ICMPv6 flood DoS

router announcement packets flood resourceds exhaustion...

IPv6 Link Local/Node Local Ping Discovery

Send a ICMPv6 ping request to all default multicast addresses, and wait to see who responds. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IPv6 Link Local/Node Local Ping Discovery',...