Cisco Security Advisory: Multiple DLSw Denial of Service Vulnerabilities in Cisco IOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple DLSw Denial of Service Vulnerabilities in Cisco IOS Advisory ID: cisco-sa-20080326-dlsw http://www.cisco.com/warp/public/707/cisco-sa-20080326-dlsw.shtml Revision 1.0 For Public Release 2008 March 26 1600 UTC GMT...

Design/Logic Flaw

Unspecified vulnerability in the Internet Protocol IP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service panic via unknown vectors, possibly related to ICMP packets and IP fragment reassembly...

Destroy TCP/IP-vulnerabilities and early warning-the black bar safety net

The use of a TCP/IP Protocol software vulnerabilities to attack the classic example is the Ping of Death attack. The use of a specific method is,your opponent create a exceeds the IP Standard's maximum length--6 5 5 3 5 bytes of the IP packet. When this"puffy"data packet arrival time,it makes the...

Buffer overflow

Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing...

Microsoft Windows TCP/IP Protocol Driver Remote Buffer Overflow Vulnerability

Description Microsoft Windows is prone to a remote buffer-overflow vulnerability. The vulnerability arises in the Microsoft Windows TCP/IP protocol driver when IP Source Routing has been enabled. A remote attacker may trigger a denial-of-service condition or may execute arbitrary code, leading to...

CVE-2006-2379: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing...

FreeBSD Security Advisory FreeBSD-SA-06:08.sack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:08.sack Security Advisory The FreeBSD Project Topic: Infinite loop in SACK handling Category: core Module: netinet Announced: 2006-02-01 Credits: Scott Wood...

OSPF Agent Detection

The remote host is running an OSPF Open Shortest Path First agent. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only RFC 1247 / RFC 2328 OSPF v2...

DCN HELLO detection

The remote IP stack answers to an obsolete protocol. Description : The remote host is running HELLO, an obsolete routing protocol. If possible, this IP protocol should be disabled. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and a...

Source Routed Packets

The remote host accepts loose source routed IP packets. The feature was designed for testing purpose. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2005-0852

Microsoft Windows XP SP1 allows local users to cause a denial of service system crash via an empty datagram to a raw IP over IP socket IP protocol 4, as originally demonstrated using code in Python 2.3...

CVE-2005-0852: Undefined Security Weakness

Microsoft Windows XP SP1 allows local users to cause a denial of service system crash via an empty datagram to a raw IP over IP socket IP protocol 4, as originally demonstrated using code in Python 2.3...

Inkra 1504GX DoS vulnerability in conducting IP protocol

Inkra 1504GX DoS vulnerability in conducting IP protocol Author: Felix [email protected] Song Liu [email protected] Release date: 2004-08-25 Affected system: Inkra 1504GX with router VSM release 2.1.4.b003 didn't test other products of Inkra. Detail: Inkra 1504GX's router VSMrelease...

CVE-2001-0929

The CVE-2001-0929 issue affects Cisco IOS CBAC (Context-Based Access Control) / Cisco Secure Integrated Software in IOS 11.2P–12.2T. The root cause is improper checking of the IP protocol type, enabling remote attackers to bypass dynamic ACLs and gain access to denied traffic. Documented as Cisco...

CVE-2001-0929

Cisco IOS Firewall Feature set, aka Context Based Access Control CBAC or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists...

Cisco IOS Firewall Feature Set fails to check IP protocol type thereby allowing packets to bypass dynamic access control lists

Overview The Cisco IOS Firewall Feature Set also known as Cisco Secure Integrated Software, or Context Based Access Control may allow an intruder to pass traffic through the firewall in violation of implied security policies. Description It is important to note that only configurations that use t...

CVE-1999-0698

CVE-1999-0698 describes a Denial of Service in the IP protocol logger (ippl) affecting Red Hat and Debian Linux. The IPPL component is the affected element; the root cause is not explicitly detailed in the provided documents. Public references list the vulnerability but do not specify concrete ex...

CVE-1999-0698

Denial of service in IP protocol logger ippl on Red Hat and Debian Linux...

CVE-1999-0698: Undefined Security Weakness

Denial of service in IP protocol logger ippl on Red Hat and Debian Linux...

Chargen UDP Service Remote DoS

When contacted, chargen responds with some random characters something like all the characters in the alphabet in a row. When contacted via UDP, it will respond with a single UDP packet. When contacted via TCP, it will continue spewing characters until the client closes the connection. The purpos...