5439 matches found
CVE-2005-1041: Undefined Security Weakness
The fibseqstart function in fibhash.c in Linux kernel allows local users to cause a denial of service system crash via /proc/net/route...
CVE-2004-0674
Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service crash via a packet with the IP record route option set...
CVE-2004-0674: Undefined Security Weakness
Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service crash via a packet with the IP record route option set...
Enterasys XSR Security Routers DoS
Description: Enterasys XSR Security Routers crash when passing a packet with the option record route. System Vulnerable: This vulnerability was found in XSR-1800 series. firmware 7.0.0.0 Proof-of-concept: I've used Hping http://www.hping.org/ to perform this example: hping3 -1 -G www.uol.com.br...
Enterasys XSR DoS
Router crashes on packet with RR option...
Record Route
It is possible to obtain the traceroute to the remote host by sending packets with the 'Record Route' option set. It is a complement to traceroute. C Tenable Network Security, Inc. References: RFC 792 Internet Control Message Protocol RFC 791 Internet Protocol include"compat.inc"; ifdescription...
DSA-442 linux-kernel-2.4.17-s390 - several vulnerabilities
Bulletin has no description...
CVE-2003-0244
The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service CPU consumption via packets with forged source addresses that cause a large number of hash table collisions...
CVE-2003-0244: Undefined Security Weakness
The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service CPU consumption via packets with forged source addresses that cause a large number of hash table collisions...
CVE-2001-0650
CVE-2001-0650 affects Cisco IOS 12.0 and earlier. A BGP UPDATE containing an unrecognized transitive attribute can cause memory corruption, leading to router crashes or bad route updates, potentially disrupting networks. Cisco’s advisory states this is caused by BGP attribute processing in config...
CVE-2001-0757
Cisco 6400 Access Concentrator Node Route Processor 2 NRP2 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet...
CVE-2001-0650: Undefined Security Weakness
Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute...
CVE-2001-0757: Undefined Security Weakness
Cisco 6400 Access Concentrator Node Route Processor 2 NRP2 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet...
CVE-2001-0752: Undefined Security Weakness
Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST ping with the IP Record Route option set...
CVE-2001-0752
Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST ping with the IP Record Route option set...
CVE-2000-0568
Sybergen Secure Desktop 2.1 is affected by CVE-2000-0568 due to improper protection against ICMP Type 9 false router advertisements, allowing remote attackers to modify default routes. The available sources document the product and impact but do not provide specific exploit code, affected version...
CVE-2000-0568: Undefined Security Weakness
Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements ICMP type 9, which allows remote attackers to modify default routes...
CVE-1999-1216
Cisco routers (9.17 and earlier) are affected by CVE-1999-1216 via improper handling of IP source routed packets. The underlying issue allows remote attackers to bypass security restrictions by sending source-routed traffic that should be denied with the no ip source-route command. This is a netw...
CVE-1999-1466
The CVE-1999-1466 entry concerns Cisco routers (versions 8.2–9.1) where remote attackers can bypass ACLs when extended IP access lists are configured on certain interfaces with the IP route cache enabled and the access list uses the established keyword. The provided sources confirm the vulnerabil...