37 matches found
CVE-2013-7311
The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial ...
CVE-2013-7307
The CVE-2013-7307 family concerns OSPF implementations that fail to validate duplicate Link State ID values in LSA packets, leading to possible routing disruption or information disclosure. Connected records confirm concrete products/vendors affected by related CVEs in 2013-0149: Yamaha routers, ...
CVE-2013-7310
The CVE-2013-7310 entry refers to Yamaha routers with an OSPF implementation that does not validate duplicate Link State ID values in LSA packets before updating the LSA database. This can enable remote attackers to cause a routing disruption (DoS) or to obtain sensitive packet information via a ...
CVE-2013-7309
Technical details for CVE-2013-7309 are not provided in the connected documents; only related CVEs (e.g., CVE-2013-0149) and vendor bulletins appear. Monitor for updates.
CVE-2013-7306
CVE-2013-7306: OSPF LSA processing on Brocade routers does not guard against duplicate Link State IDs in LSAs before updating the database, enabling remote users to cause routing disruption (DoS) or glean sensitive packet data via a crafted LSA. This CVE is related to CVE-2013-0149 (OSPF LSA vali...
CVE-2013-7306
The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service routing disruption or obtain sensitiv...
CVE-2013-7308
The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of servic...
CVE-2013-7313
The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial o...
CVE-2013-5385
The OSPF implementation in IBM i 6.1 and 7.1, in z/OS on zSeries servers, and in Networking Operating System aka NOS, formerly BLADE Operating System does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database, which allows remote...
CVE-2013-5385
The OSPF implementation in IBM i 6.1 and 7.1, in z/OS on zSeries servers, and in Networking Operating System aka NOS, formerly BLADE Operating System does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database, which allows remote...
CVE-2013-5385
The CVE-2013-5385 issue concerns OSPFv2 on IBM System Networking NOS (and related IBM i platforms) where OSPFv2 LSA type 1 packets are not properly validated before LSA-database operations. IBM and related advisories describe that remote attackers could trigger routing disruption or leak sensitiv...
CVE-2013-4806
The OSPF implementation on HP JD9A routers; HP J4A, J484B, J8A, JD3A, JEA, and JF55A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on...
Design/Logic Flaw
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database,...
CVE-2013-0149
CVE-2013-0149: The OSPF implementation in Cisco IOS (12.0–12.4, 15.0–15.3), IOS-XE 2.x–3.9.xS, ASA/PIX 7.x–9.1, FWSM, NX-OS, and StarOS before 14.0.50488 fails to properly validate LSA type 1 packets before updating the LSA database, enabling remote attackers to cause a denial of service (routing...
CVE-2013-0149
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database,...
Design/Logic Flaw
The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions, which allows remote attackers to delete index.php and "disrupt modrewrite-less URL routing."...
