CVE-2002-2254

The CVE describes a vulnerability in the Linux kernel’s Netfilter/IPTables: the experimental IP packet queuing feature in kernels 2.4 (up to 2.4.19) and 2.5 (up to 2.5.31). If a privileged process exits while traffic is not queued, a later process with the same PID may access network traffic that...

Code injection

Arris Cadant C3 CMTS allows remote attackers to cause a denial of service service termination via a malformed IP packet with an invalid IP option...

CVE-2007-2796

CVE-2007-2796 affects Arris Cadant C3 CMTS. The flaw stems from mishandling of IP options, allowing remote attackers to cause a denial of service (service termination) by sending a single malformed IP packet with an invalid IP option. Authentication is not required. Impact is the termination of s...

CVE-2007-2796

Arris Cadant C3 CMTS allows remote attackers to cause a denial of service service termination via a malformed IP packet with an invalid IP option...

NetSniper network pioneer works-vulnerability warning-the black bar safety net

NetSniper network tip of the soldiers is in Shanghai on a large lake network system Co., Ltd. developed the network access detection and a controller. It can automatically detect the network without permission the erection of a proxy server is system or an illegal router, and through the illegal...

CVE-2006-4177

Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended...

Cisco IOS GRE issue

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +---- Title Cisco Systems IOS GRE decapsulation fault Authors FX [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/CiscoGRE.txt Affected Products Cisco IOS Tested on: C3550 IOS 12.119 Cisco Bug ID...

CVE-2006-3596

The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System IPS 5.11 through 5.1p1, as installed on various Cisco Intrusion Prevention System 42xx appliances, allows remote attackers to cause a denial of service kernel panic and possibly network outage via a...

CVE-2006-1671

Control cards for Cisco Optical Networking System ONS 15000 series nodes before 20060405 allow remote attackers to cause a denial of service card reset via 1 a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; 2 a "crafted" IP packet to a devic...

CVE-2006-1671

Control cards for Cisco Optical Networking System ONS 15000 series nodes before 20060405 allow remote attackers to cause a denial of service card reset via 1 a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; 2 a "crafted" IP packet to a devic...

SNORT Incorrect fragmented packet reassembly

Snort 2.4.3 has a bug in processing fragmented ip packets which has ip options. frag3 preprocessor of snort skips ipoptionlength bytes from end of the ip options when reassembling packet, thus allowing anyone to evade ids. Guys at snort.org already informed and are fixing the problem...

honeyd honeypot detection

Invalid IP packet reassembly allows system identification...

Linksys VPN routers DoS

IP packet with invalid IP options causes router to crash...

CVE-2005-4276

Westell Versalink 327W allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD. NOTE: the provenance of this issue is unknown; the details are obtained solely from third party...

CVE-2005-4276

Westell Versalink 327W allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD. NOTE: the provenance of this issue is unknown; the details are obtained solely from third party...

CVE-2005-4275

CVE-2005-4275 affects the Scientific Atlanta DPX2100 Cable Modem. A remote attacker can cause a denial of service (device crash) by sending an IP packet with identical source and destination IPs and ports and the SYN flag set (LanD), demonstrated with hping2. The provenance is noted as unknown; d...

CVE-2005-4276

Westell Versalink 327W is affected by CVE-2005-4276, where a remote attacker can cause a denial-of-service (device crash) by sending an IP packet with identical source and destination IPs and ports and with the SYN flag set (LanD). The available descriptions indicate the issue’s provenance is unk...

RLA ("Remote LanD Attack")

Below is a copy of my RLA exploit submission in ASCII. Attached is a MSWord .doc version with rich formatting, created with ease of view in mind. Regards... ---------- RLA "Remote LanD Attack" 2005 As discovered by: Justin M. Wray [email protected] Devices/Vendors Vulnerable: - Microsoft Window...

CVE-2005-4258

Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID...

CVE-2005-4258

Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID...