CVE-2011-2395

The CVE-2011-2395 vulnerability affects Cisco IOS with an ND (Neighbor Discovery) implementation on unspecified switches. It allows remote attackers to bypass Router Advertisement Guarding by sending fragmented IPv6 packets where the Router Advertisement (RA) is contained in the second fragment. ...

Bypassing Cisco's ICMPv6 Router Advertisement Guard feature

To bypass the Router Advertisement Guarding feature in the very few Cisco switches and images that support it: Attack: ======= Make the evil Router Advertisement fragmented and put the ICMPv6 into the second fragment, eg. by putting a very large Destination extension header before the ICMPv6 part...

Cisco routers Router Advertisement Guarding protection bypass

It's possible to bypass protection with fragmented ICMPv6 packet...

ICMPv6 Router Announcement flooding denial of service affecting multiple systems

This security advisory is released because Microsoft doesnt want to fix the issue. Cisco did for its IOS and ASA within 3 months. Title: ICMPv6 Router Announcement flooding denial of service affecting multiple systems Date: 05 April 2011 URL:...

CVE-2011-1652

The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Advertisement RA, and does not provide an option to ignore an unexpected RA, which allows remote attackers to conduct...

Default configuration

DISPUTED The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Advertisement RA, and does not provide an option to ignore an unexpected RA, which allows remote attackers to...

CVE-2011-1652

CVE-2011-1652 concerns Windows 7 default behavior: upon IPv6 Router Advertisement, the system prefers a new IPv6/DHCPv6 path over existing IPv4/DHCPv4 and provides no option to ignore an unexpected RA. This enables remote attackers on the local network to perform man-in-the-middle attacks on traf...

CVE-2011-1652

The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Advertisement RA, and does not provide an option to ignore an unexpected RA, which allows remote attackers to conduct...

Microsoft Windows TCP/IP Remote Code Execution Vulnerabilities (941644)

This host is missing a critical security update according to Microsoft Bulletin MS08-001. OpenVAS Vulnerability Test $Id: gbms08-001.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows TCP/IP Remote Code Execution Vulnerabilities 941644 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone...

Microsoft Windows TCP/IP Remote Code Execution Vulnerabilities (941644)

This host is missing a critical security update according to Microsoft Bulletin MS08-001. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-4669

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service CPU consumption and system hang by sending many Router Advertisement RA messages...

CVE-2010-4671

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS before 15.01XA5 allows remote attackers to cause a denial of service CPU consumption and device hang by sending many Router Advertisement RA messages with different source addresses, as demonstrated by the floodroute...

Design/Logic Flaw

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS before 15.01XA5 allows remote attackers to cause a denial of service CPU consumption and device hang by sending many Router Advertisement RA messages with different source addresses, as demonstrated by the floodroute...

Code injection

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service CPU consumption and system hang by sending many Router Advertisement RA messages...

CVE-2010-4670

The Neighbor Discovery ND protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service CPU consumption and device hang by...

CVE-2010-4671

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS before 15.01XA5 allows remote attackers to cause a denial of service CPU consumption and device hang by sending many Router Advertisement RA messages with different source addresses, as demonstrated by the floodroute...

CVE-2010-4669

The CVE-2010-4669 entry concerns the IPv6 Neighbor Discovery (ND) router advertisement flood vulnerability. Affected products include the IPv6 stack in Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7. The issue arises when an attacker sends many Router Advertise...

IPv6 Local Neighbor Discovery Using Router Advertisement

Send a spoofed router advertisement with high priority to force hosts to start the IPv6 address auto-config. Monitor for IPv6 host advertisements, and try to guess the link-local address by concatenating the prefix, and the host portion of the IPv6 address. Use NDP host solicitation to determine ...

CVE-2009-2189

The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of 1 Router Advertisement and 2 Neighbor Discovery packets, which allows remote attackers to cause a denial of service resource...

Apple Time Capsule and AirPort Base Station Firmware < 7.5.2 (APPLE-SA-2010-12-16-1)

According to the firmware version collected via SNMP, the remote Apple Time Capsule / AirPort Base Station / AirPort Extreme Base Station is affected by multiple remote vulnerabilities. - An integer overflow exists in the 'netsnmpcreatesubtreecache' function that can be exploited using a speciall...