Cisco Application Policy Infrastructure Controller Access Control Error Vulnerability

Cisco Application Policy Infrastructure Controller APIC is an automated infrastructure deployment and governance solution from Cisco. An access control error vulnerability exists in the management interface in Cisco APIC, which stems from the program's lack of an access control mechanism for IPv6...

OracleVM 3.4 : dhcp (OVMSA-2018-0023)

The remote OracleVM system is missing necessary patches to address critical security updates : - Added oracle-errwarn-message.patch - Resolves: 1550085 - CVE-2018-5733 Avoid reference overflow 12:4.1.1-53.P1.2 - Resolves: 1550083 - CVE-2018-5732 Avoid options buffer overflow - Resolves: 1063217 -...

CVE-2017-9496

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows physically proximate attackers to access an SNMP server by connecting a cable to the Ethernet port, and then establishing communication with the device's link-local IPv6 address...

CVE-2017-9496: Undefined Security Weakness

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows physically proximate attackers to access an SNMP server by connecting a cable to the Ethernet port, and then establishing communication with the device's link-local IPv6 address...

Fedora 26 : libupnp (2017-23535a31f8)

miniserver: fix binding to ipv6 link-local addresses - Fix out-of-bound access in createurllist CVE-2016-8863 - If the error or info log files can not be created, use stderr and stdout instead. - SF Bug Tracker 132 CVE-2016-6255: write files via POST Note that Tenable Network Security has...

CVE-2015-6586

The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network...

CVE-2015-8914

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address...

CVE-2015-8914

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address...

CVE-2015-8914: Undefined Security Weakness

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address...

libndp security update

1.2-6 - libndp: fix hop limit validation CVE-2016-3698 1.2-5 - libndp: validate the IPv6 hop limit CVE-2016-3698 - libndb: reject redirect and router advertisements from non-link-local CVE-2016-3698...

ipv6-multicast-mld-list NSE Script

Uses Multicast Listener Discovery to list the multicast addresses subscribed to by IPv6 multicast listeners on the link-local scope. Addresses in the IANA IPv6 Multicast Address Space Registry have their descriptions listed. Script Arguments ipv6-multicast-mld-list.timeout timeout to wait for...

BSD Command Shell, Reverse TCP Stager (IPv6)

Spawn a command shell staged. Connect back to the attacker over IPv6 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework ReverseTcp ---------- BSD reverse TCP stager. module MetasploitModule CachedSize = 81 include...

BSD Command Shell, Reverse TCP Inline (IPv6)

Connect back to attacker and spawn a command shell over IPv6 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 96 include Msf::Payload::Single include Msf::Payload::Bsd include...

Link-Local Multicast Name Resolution (LLMNR) Detection

The remote device answered to a Link-local Multicast Name Resolution LLMNR request. This protocol provides a name lookup service similar to NetBIOS or DNS. It is enabled by default on modern Windows versions. TRUSTED...

PT-2011-2535

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1...

IPv6 Link Local/Node Local Ping Discovery

Send a ICMPv6 ping request to all default multicast addresses, and wait to see who responds. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IPv6 Link Local/Node Local Ping Discovery',...

IPv6 Local Neighbor Discovery Using Router Advertisement

Send a spoofed router advertisement with high priority to force hosts to start the IPv6 address auto-config. Monitor for IPv6 host advertisements, and try to guess the link-local address by concatenating the prefix, and the host portion of the IPv6 address. Use NDP host solicitation to determine ...

Linux Command Shell, Reverse TCP Stager (IPv6)

Spawn a command shell staged. Connect back to attacker over IPv6 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Linux Reverse TCP/IPv6 Stager module MetasploitModule CachedSize = 77 include Msf::Payload::Stager inclu...

Linux Mettle x86, Reverse TCP Stager (IPv6)

Inject the mettle server payload staged. Connect back to attacker over IPv6 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Linux Reverse TCP/IPv6 Stager module MetasploitModule CachedSize = 77 include...

Windows (XP, 2k3, Longhorn) is vulnerable to IpV6 Land attack.

Hi! The land attack described in - http://www.securityfocus.com/archive/1/392354 - is fixed for ipv4 by last security updates, but not for ipv6 protocol. As in IpV4 version of the attack, the build-in firewall has to be turned off to experience the result 1-5 seconds of DoS condition. Tools used:...