EUVD-2008-5819

Malware in sbrugna...

Code injection

Check Point VPN-1 R55, R65, and other versions, when Port Address Translation PAT is used, allows remote attackers to discover intranet IP addresses via a packet with a small TTL, which triggers an ICMPTIMXCEEDINTRANS aka ICMP time exceeded in-transit response containing an encapsulated IP packet...

Check Point VPN-1防火墙产品端口地址翻译信息泄露漏洞

BUGTRAQ ID: 32306 Check Point VPN-1 Power和UTM都是Check Point开发的防火墙类产品。 如果远程攻击者向VPN-1 Power和UTM所发送的特制报文被端口地址翻译（PAT）映射到内部设备上的端口的话，生成的ICMP错误报文中可能会包含有关内部网络的信息。此时如果存活时间（TTL）设置的过低的话，上述防火墙产品就无法正确的过滤ICMP报文中的封装IP头，导致泄露内部IP地址。 Check Point Software VPN-1 UTM NGX R65 Check Point Software VPN-1 Power Check Poin...

Check Point VPN-1 PAT Information Disclosure Vulnerability - Active Check

Check Point VPN-1 PAT is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2008 Tim Brown and Portcullis Computer Security Ltd Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Part II: Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: A more detailed description of 3Com ® OfficeConnect® Remote 812 ADSL Router DESCRIPTION: A big description of the vulnerability, Status and Solutions. I send this mail to explain the real problem and the solutions to all these people that were...

Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router Date: 27-05-2002 Impact: A vulnerability in PAT Port Address Translation allow access to all ports in the computer behind the router. Author: Ismael Briones Vilar [email protected]...