CVE-2011-1652

The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Advertisement RA, and does not provide an option to ignore an unexpected RA, which allows remote attackers to conduct...

Default configuration

DISPUTED The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Advertisement RA, and does not provide an option to ignore an unexpected RA, which allows remote attackers to...

CVE-2011-1652

CVE-2011-1652 concerns Windows 7 default behavior: upon IPv6 Router Advertisement, the system prefers a new IPv6/DHCPv6 path over existing IPv4/DHCPv4 and provides no option to ignore an unexpected RA. This enables remote attackers on the local network to perform man-in-the-middle attacks on traf...

CVE-2011-1652

The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Advertisement RA, and does not provide an option to ignore an unexpected RA, which allows remote attackers to conduct...

Microsoft Windows TCP/IP Remote Code Execution Vulnerabilities (941644)

This host is missing a critical security update according to Microsoft Bulletin MS08-001. OpenVAS Vulnerability Test $Id: gbms08-001.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows TCP/IP Remote Code Execution Vulnerabilities 941644 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone...

Microsoft Windows TCP/IP Remote Code Execution Vulnerabilities (941644)

This host is missing a critical security update according to Microsoft Bulletin MS08-001. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-4669

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service CPU consumption and system hang by sending many Router Advertisement RA messages...

CVE-2010-4671

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS before 15.01XA5 allows remote attackers to cause a denial of service CPU consumption and device hang by sending many Router Advertisement RA messages with different source addresses, as demonstrated by the floodroute...

Code injection

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service CPU consumption and system hang by sending many Router Advertisement RA messages...

Design/Logic Flaw

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS before 15.01XA5 allows remote attackers to cause a denial of service CPU consumption and device hang by sending many Router Advertisement RA messages with different source addresses, as demonstrated by the floodroute...

CVE-2010-4671

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS before 15.01XA5 allows remote attackers to cause a denial of service CPU consumption and device hang by sending many Router Advertisement RA messages with different source addresses, as demonstrated by the floodroute...

CVE-2010-4669

The CVE-2010-4669 entry concerns the IPv6 Neighbor Discovery (ND) router advertisement flood vulnerability. Affected products include the IPv6 stack in Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7. The issue arises when an attacker sends many Router Advertise...

CVE-2010-4670

The Neighbor Discovery ND protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service CPU consumption and device hang by...

IPv6 Local Neighbor Discovery Using Router Advertisement

Send a spoofed router advertisement with high priority to force hosts to start the IPv6 address auto-config. Monitor for IPv6 host advertisements, and try to guess the link-local address by concatenating the prefix, and the host portion of the IPv6 address. Use NDP host solicitation to determine ...

CVE-2009-2189

The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of 1 Router Advertisement and 2 Neighbor Discovery packets, which allows remote attackers to cause a denial of service resource...

Apple Time Capsule and AirPort Base Station Firmware < 7.5.2 (APPLE-SA-2010-12-16-1)

According to the firmware version collected via SNMP, the remote Apple Time Capsule / AirPort Base Station / AirPort Extreme Base Station is affected by multiple remote vulnerabilities. - An integer overflow exists in the 'netsnmpcreatesubtreecache' function that can be exploited using a speciall...

Update Protection against Microsoft Windows ICMPv6 Router Advertisement Vulnerability (MS10-009)

A remote code execution vulnerability exists in the Windows TCP/IP stack due to insufficient bounds checking when processing specially crafted ICMPv6 Router Advertisement packets. An anonymous attacker could exploit the vulnerability by sending specially crafted ICMPv6 Router Advertisement packet...

CVE-2010-0239

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6...

Out-of-bounds

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6...

CVE-2010-0239

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6...