1274 matches found
CVE-2008-4247
ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...
CVE-2008-4247
CVE-2008-4247 affects FTP servers that interpret long commands as multiple requests, enabling cross-site request forgery (CSRF) and arbitrary FTP commands via a crafted long ftp:// URI. The primary publicly documented impact comes from FreeBSD lukemftpd, which splits long commands and could allow...
CVE-2008-4247
ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...
CVE-2008-4247
ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...
CVE-2008-3584
NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service system crash via a crafted PPPoE packet...
Design/Logic Flaw
NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service system crash via a crafted PPPoE packet...
CVE-2008-3584
NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service system crash via a crafted PPPoE packet...
CVE-2008-3584
NetBSD 3.0, 3.1, and 4.0 are affected by CVE-2008-3584 due to improper length validation of a PPPoE packet tag when a PPPoE instance exists, allowing remote attackers to cause a denial of service (system crash) by sending a crafted PPPoE packet. Affected component: PPPoE handling code; root cause...
Denial of service
The mldinput function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service divide-by-zero error and panic via a malformed ICMPv6 Multicast Listener Discovery MLD query with a certain Maximum Response Del...
CVE-2008-3584: Improper Input Validation
NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service system crash via a crafted PPPoE packet...
CVE-2008-2464
The CVE-2008-2464 issue affects NetBSD 4.0, FreeBSD, and KAME kernels with INET6 enabled, where the mld_input function in sys/netinet6/mld6.c mishandles certain ICMPv6 MLD-QUERY Maximum-Response-Delay values. This can allow remote attackers on the local link to trigger a divide-by-zero error and ...
CVE-2008-2464
The mldinput function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service divide-by-zero error and panic via a malformed ICMPv6 Multicast Listener Discovery MLD query with a certain Maximum Response Del...
CVE-2008-2464: Undefined Security Weakness
The mldinput function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service divide-by-zero error and panic via a malformed ICMPv6 Multicast Listener Discovery MLD query with a certain Maximum Response Del...
NetBSD ICMPv6 MLD报文远程拒绝服务漏洞
BUGTRAQ ID: 31026 CVE ID: CVE-2008-2464 CNCVE ID：CNCVE-20082464 NetBSD是一款开放源代码的操作系统。 NetBSD不正确处理ICMPv6 MLD查询报文，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 NetBSD不正确处理Maximum-Response-Delay字段设置小于0x0010的ICMPv6 MLD-QUERY报文，接收到这种类型报文时，NetBSD代码会由于除零错误而导致系统停止响应，造成拒绝服务攻击。 NetBSD Current NetBSD 4.0 厂商解决方案 只有使用如下选项编译的内核受此漏洞影...
Input validation
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service panic via a crafted Packet Too B...
CVE-2008-3530
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service panic via a crafted Packet Too B...
CVE-2008-3530
CVE-2008-3530 affects FreeBSD 6.3–7.1 and possibly other OSes, caused by insufficient validation of the proposed MTU in ICMPv6 Packet Too Big messages. This can let a remote attacker trigger a kernel panic and denial of service when IPv6 is enabled. Public references indicate vulnerable FreeBSD/N...
CVE-2008-3530
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service panic via a crafted Packet Too B...
CVE-2008-3530: Improper Input Validation
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service panic via a crafted Packet Too B...
NetBSD malformed ICMPv6 MLD-QUERY denial of service
Overview NetBSD fails to properly handle ICMPv6 MLD query packets, which can allow a remote, unauthenticated attacker to cause a denial of service. Description ICMPv6, which is defined in RFC 4443, is a version of the ICMP protocol for IPv6. Multicast Listener Discovery MLD for IPv6, which is...