CVE-2005-0210

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...

security flaw

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...

ROSE Attack (variation 2)

Exploit for unknown platform in category dos / poc ========================= ROSE Attack variation 2 ========================= / ROSE attack variation 2 chuck at lemure.net Discovered by: gandalf at digital.net code modified from large IGMP attack by: Kox by Coolio coolio at k-r4d.com Sends out...

FreeBSD fails to limit number of TCP segments held in reassembly queue

Overview FreeBSD fails to limit the number of TCP segments held in a reassembly queue which could allow an attacker to exhaust all available memory buffers mbufs on the destination system resulting in a denial-of-service condition. Description The Transmission Control Protocol TCP is part of the...

Libnids: remote code execution vulnerability

Background Libnids is a component of a network intrusion detection system. Description There is a bug in the part of libnids code responsible for TCP reassembly. The flaw probably allows remote code execution. Impact A remote attacker could possibly execute arbitrary code. Workaround There is no...

CVE-2003-0850

The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."...

Libnids <= 1.17 buffer overflow

Hello, Libnids is a library which implements the functionality of NIDS E-component. Libnids provides IP defragmentation, TCP stream reassembly and port scan detection. Robert Watson [email protected] has found a bug in the part of libnids code responsible for TCP reassembly. The flaw probably...

libnids buffer overflow

Buffer overflow in TCP packet reassembly...

CVE-2003-0850

CVE-2003-0850 affects libnids prior to 1.18, where the TCP reassembly code can be triggered by overlarge TCP packets, leading to memory corruption and potential remote code execution. Public advisories note a remote vulnerability in libnids and recommend upgrading to libnids 1.18 or newer (e.g., ...

CVE-2003-0850

The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."...

CVE-2003-0850: Undefined Security Weakness

The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."...

CVE-2003-0364

CVE-2003-0364 affects the Linux kernel 2.4 series: TCP/IP fragment reassembly handling can be abused by crafted packets to trigger high CPU usage via hash table collisions, leading to a denial of service. Debians OpenVAS entries reference kernel updates (e.g., kernel-patch-2.4.18-powerpc, kernel-...

CVE-2003-0364: Undefined Security Weakness

The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service CPU consumption via certain packets that cause a large number of hash table collisions...

CVE-2003-0209

CVE-2003-0209 : Snort 2.0 and earlier contains an integer overflow in the TCP stream4 preprocessor used for TCP stream reassembly. This heap-based overflow can be exploited remotely via large TCP sequence numbers to execute arbitrary code, typically as the Snort user (likely root). Multiple sourc...

CVE-2003-0209

Removed by vendor...

CVE-2003-0209: Undefined Security Weakness

Integer overflow in the TCP stream reassembly module stream4 for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow...

CORE-2003-0307: Snort TCP Stream Reassembly Integer Overflow Vulnerability

Core Security Technologies Advisory http://www.coresecurity.com Snort TCP Stream Reassembly Integer Overflow Vulnerability Date Published: 2003-04-15 Last Update: 2003-04-15 Advisory ID: CORE-2003-0307 Bugtraq ID: 7178 CVE Name: None currently assigned Title: Snort TCP Stream Reassembly Integer...

Heap overflow in Snort "stream4" preprocessor

Overview The Snort "stream4" preprocessor module contains a vulnerability that allows remote attackers to execute arbitrary code with the privileges of the user running Snort, typically root. Description Researchers at CORE Security Technologies have discovered a remotely exploitable heap overflo...

Snort TCP Packet Reassembly Integer Overflow Vulnerability

Description A vulnerability has been discovered in Snort. The problem occurs during the reassembly of TCP packets by the stream4 preprocesser. By sending specially crafted fragmented packets across a network monitored by Snort, it may be possible to trigger an integer overflow. As a result, a...

ZYXEL Prestige 681 SDSL Router - IP Fragment Reassembly

ZYXEL Prestige 681 SDSL Router - IP Fragment Reassembly source: https://www.securityfocus.com/bid/3711/info Prestige is a product line of DSL routers produced and distributed by Zyxel. When a Zyxel router receives fragmented packets that after reassembly is greater than 64 kilobytes in length, th...