757 matches found
FreeBSD Security Advisory (FreeBSD-SA-04:04.tcp.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:04.tcp.asc ADV FreeBSD-SA-04:04.tcp.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Security Advisory (FreeBSD-SA-04:04.tcp.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:04.tcp.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Snort碎片重组TTL值导致漏报漏洞
BUGTRAQ ID: 29327 CVECAN ID: CVE-2008-1804 Snort是广泛部署的开放源码网络入侵检测系统（IDS）。 Snort没有正确地重组IP报文，远程攻击者可能利用此漏洞绕过检测。 在接收入站碎片时，Snort检查碎片的存活时间（TTL）值并与初始碎片的TTL做比较。如果二者之间的差异大于所配置的量（默认最大值为5）的话，就会丢弃碎片，也无法对其应用规则，这导致Snort无法过滤或检查有效的通讯。 Snort Project Snort 2.8 Snort Project Snort 2.6 临时解决方法：...
Design/Logic Flaw
Unspecified vulnerability in the Internet Protocol IP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service panic via unknown vectors, possibly related to ICMP packets and IP fragment reassembly...
CVE-2008-1095
Unspecified vulnerability in the Internet Protocol IP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service panic via unknown vectors, possibly related to ICMP packets and IP fragment reassembly...
CVE-2008-1095
CVE-2008-1095 affects the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10. The vulnerability is described as an unspecified issue that allows remote attackers to bypass firewall policies or cause a denial of service (panic) via unknown vectors, with possible involvement of ICMP ...
8e6 Technologies R3000 Internet Filter Bypass by Request Split
8e6 Technologies R3000 Internet Filter Bypass by Request Split Product: 8e6 Technologies R3000 Internet Filter http://www.8e6.com/network-security/internet-filtering/internet-filtering.html The HTTP URL filtering function provided by the 8e6 Technologies R3000 Internet Filter can be bypassed by...
8e6-bypass.txt
8e6 Technologies R3000 Internet Filter Bypass by Request Split Product: 8e6 Technologies R3000 Internet Filter http://www.8e6.com/network-security/internet-filtering/internet-filtering.html The HTTP URL filtering function provided by the 8e6 Technologies R3000 Internet Filter can be bypassed by...
TippingPoint detection bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-Advisory3ComTippingPointIPSDetectionBypass2.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: TippingPoint detection bypass...
IPv6 fragments bypass in nf_conntrack netfilter code
nfconntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IPCTESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments...
Linux Kernel Netfilter nf_conntrack IPv6报文重组绕过规则漏洞
Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel中netfilter的模块实现上存在漏洞，远程攻击者可能利用此漏洞绕过访问过滤。 netfilter的nfconntrack函数在重组碎片IPv6报文期间没有设置nfctinfo，将默认值初始化为0，而这是IPCTESTABLISHED的值，因此所有IPv6碎片都追踪为ESTABLISHED，这样攻击者就可以绕过某些接受ESTABLISHED报文的规则组。 Linux kernel 2.6.20.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Sun Solaris IP实现远程拒绝服务漏洞
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris 8/9的IP实现上存在安全漏洞，远程非特权用户可能利用此漏洞通过发送特制IP报文降低联网Solaris系统的性能。 Solaris系统上可见大量的伪造IP碎片和/或大量的IP碎片重组失败。例如，运行以下命令： % /usr/bin/netstat -s | /usr/bin/egrep 'ReasmDuplicates|ReasmFails' 可能显示很高的ipv6ReasmDuplicates和ipv6ReasmFails计数器值。 此外，单处理器的Solaris...
CVE-2007-1497
nfconntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IPCTESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments...
CVE-2007-1497
nfconntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IPCTESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments...
Design/Logic Flaw
nfconntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IPCTESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments...
CVE-2007-1497
nfconntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IPCTESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments...
Snort Inline模式碎片重组拒绝服务漏洞
Snort是广泛部署的开放源码网络入侵检测系统（IDS）。很多其他IDS产品中也使用了Snort及其组件。 Snort Inline在处理畸形的碎片报文时存在漏洞，远程攻击者可能利用此漏洞导致Snort崩溃。 如果在Linux平台上以Inline模式运行Snort的话，且启用了Frag3同时禁用了ipconntrack，则如果向Snort发送了特制的碎片报文的话就会导致拒绝服务。 Snort Project Snort 2.7.0 beta 1 Snort Project Snort 2.6.1.2 Snort Project Snort 2.6.1.1...
snort packets reassembly DoS
Invalid packets reassembly on connection tracking causes application to crash...
snort-dos.txt
/ DOS Snort Inline Affected Versions: 2.6.1.1, 2.6.1.2, 2.7.0beta Requirements : Frag3 Enabled, Inline, Linux, ipconntrack disabled Antimatt3r [email protected] Offset needs to be supplied that would cause reassembly for different snort fragmentation reassembly policies. Since the first packet...
FreeBSD : snort -- DCE/RPC preprocessor vulnerability (afdf500f-c1f6-11db-95c5-000c6ec775d9)
A IBM Internet Security Systems Protection Advisory reports : Snort is vulnerable to a stack-based buffer overflow as a result of DCE/RPC reassembly. This vulnerability is in a dynamic-preprocessor enabled in the default configuration, and the configuration for this preprocessor allows for...