Multiple IOS IPS Vulnerabilities

The Intrusion Prevention System IPS feature set of Cisco IOS® contains several vulnerabilities. These include: Fragmented IP packets may be used to evade signature inspection. IPS signatures utilizing the regular expression feature of the ATOMIC.TCP signature engine may cause a router to crash...

Ubuntu 5.04 / 5.10 : linux-source-2.6.10, linux-source-2.6.12 vulnerabilities (USN-281-1)

The sysmbind function did not properly verify the validity of the 'maxnod' argument. A local user could exploit this to trigger a buffer overflow, which caused a kernel crash. CVE-2006-0557 The SELinux module did not correctly handle the tracer SID when a process was already being traced. A local...

[Full-disclosure] [USN-281-1] Linux kernel vulnerabilities

=========================================================== Ubuntu Security Notice USN-281-1 May 04, 2006 linux-source-2.6.10, linux-source-2.6.12 vulnerabilities CVE-2006-0557, CVE-2006-1052, CVE-2006-1055, CVE-2006-1066, CVE-2006-1242, CVE-2006-1343, CVE-2006-1368, CVE-2006-1525...

snort IDS intrusion detection bypass

Invalid IP packets reassembly allows signatures bypass...

DOS во встроенном NAT сервере Windows 2000

Обнаружил dos во встроенном NAT сервере Windows 2000 Конфигурация проверенных серверов: Windows 2000 English Standard/Advanced Service Pack 4 + Update Rollup 1 for Service Pack 4 с установленным NAT сервером. При прохождении ip пакетов через сервер, с включенной опцией "Loose Source and Record...

Multiple HP-UX vulnerabilities

IP packets DoS, IPSec remote unauthorized access...

CVE-2004-2641

Unspecified vulnerability in Sun Fire 3800/4800/4810/6800, Sun Fire V1280, and Netra 1280 allows remote attackers to cause a denial of service system controller hang via IP Packets With Type of Service TOS Bits set...

ZyxelIPHandling.txt

|| || Infobyte Security Research || www.infobyte.com.ar || 04.08.2005 || .:: SUMMARY Prestige 650R-31 ADSL Router -CPU exausting handling malformed fragmented packets Affected ZyNOS FW v3.40KO.1 It is suspected that all previous versions of ZyNOS are vulnerable. .:: BACKGROUND Zyxel Prestige 600...

CVE-2001-1540

CVE-2001-1540 affects IPRoute versions 0.973, 0.974, and 1.18. According to the connected sources, remote attackers can cause a denial of service by sending fragmented IP packets that split the TCP header. The information consistently describes a network-exposed DoS condition but does not provide...

CVE-2001-1554

IBM AIX 430 is affected by CVE-2001-1554 due to improper unlocking of IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) by sending PMTU IP packets. The impact is a partial loss of availability as described in the sources. The connected documents confirm the root cause...

CVE-2001-1540

IPRoute 0.973, 0.974 and 1.18 allows remote attackers to cause a denial of service via fragmented IP packets that split the TCP header...

CVE-2002-1712

Microsoft Windows 2000 is affected by CVE-2002-1712: a remote attacker can cause a denial of service via memory consumption by flooding the NetBIOS port (TCP/139) with empty TCP/IP packets that have ACK and FIN bits set, as shown by stream3. Impact is described as partial availability. The provid...

Multiple Clavister Security Gateway Appliance Firewall vulnerabilities

DoS on IP packets handling. Weak authentication mechanism...

CVE-2005-1717

ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40KO.1 allows remote attackers to cause a denial of service CPU consumption and network loss via crafted fragmented IP packets...

CVE-2005-1717

The CVE-2005-1717 entry concerns ZyXEL Prestige 650R-31 routers running ZyNOS FW v3.40(KO.1). Affected component: the device’s IP stack handling of fragmented packets. Root cause: crafted fragmented IP packets that lead to denial of service via sustained CPU usage and network loss. Impact: remote...

CVE-2005-1717

ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40KO.1 allows remote attackers to cause a denial of service CPU consumption and network loss via crafted fragmented IP packets...

[Full-disclosure] [ISR] Zyxel Prestige 650R-31 Denial Of Service

|| || Infobyte Security Research || www.infobyte.com.ar || 04.08.2005 || .:: SUMMARY Prestige 650R-31 ADSL Router -CPU exausting handling malformed fragmented packets Affected ZyNOS FW v3.40KO.1 It is suspected that all previous versions of ZyNOS are vulnerable. .:: BACKGROUND Zyxel Prestige 600...

CVE-2005-0048

Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."...

Microsoft Windows XP/2000 - Internet Protocol Validation Remote Code Execution (2)

// source: https://www.securityfocus.com/bid/13116/info Microsoft Windows is reported prone to a remote code execution vulnerability. It is reported that the vulnerability manifests when an affected Microsoft platform receives and processes an especially malformed TCP/IP packet. Reports indicate...

CVE-2005-0048

Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."...