[SECURITY] Fedora 11 Update: rubygem-actionpack-2.3.2-2.fc11

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

[SECURITY] Fedora 11 Update: rubygem-actionpack-2.3.3-2.fc11

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

fwbuilder -- security issue in temporary file handling

Firewall Builder release notes reports: Vadim Kurland [email protected] reports: Fwbuilder and libfwbuilder 3.0.4 through to 3.0.6 generate iptables scripts with a security issue when also used to generate static routing configurations...

CVE-2009-1168

Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to...

CVE-2009-2049

Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1 through 12.233SXI2, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows...

Memory corruption

Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to...

CVE-2009-2049

CVE-2009-2049 covers Cisco IOS/IOS XE with RFC4893 BGP enabled. A remote attacker can trigger a device reload by sending a malformed BGP update from a 4‑byte AS speaker to a 2‑byte AS speaker (Bug CSCta33973). Affects multiple releases across 12.x trains and IOS XE 2.3–2.4; exploitation leads to ...

CVE-2009-1168

Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to...

RIP-2 Poisoning Routing Table Modification

This host is running a RIP-2 agent. RIP-2 requests can be authenticated but Nessus cannot check this in the current configuration. If authentication is not implemented, an attacker on the same network may feed the target machine bogus routes and hijack network connections. Note that this may be a...

RIP Poisoning Routing Table Modification (Adjacent Network)

It was possible to poison the remote host routing tables through the RIP protocol. An attacker may use this to hijack network connections. Several RIP agents reject routes that are not sent by a neighbor, so this flaw may not be exploitable from a non-adjacent network. C Tenable Network Security,...

RIP-1 Poisoning Routing Table Modification

This host is running a RIP-1 agent. RIP-1 does not implement authentication. An attacker on the same network may feed the target machine bogus routes and hijack network connections. Note that Nessus cannot test this flaw as it is not running on the same network. C Tenable Network Security, Inc...

[SECURITY] Fedora 11 Update: quagga-0.99.12-1.fc11

Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Rout...

[SECURITY] Fedora 10 Update: quagga-0.99.12-1.fc10

Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Rout...

Debian DSA-1788-1 : quagga - improper assertion

It was discovered that Quagga, an IP routing daemon, could no longer process the Internet routing table due to broken handling of multiple 4-byte AS numbers in an AS path. If such a prefix is received, the BGP daemon crashes with an assert failure, leading to a denial of service. %NASLMINLEVEL...

[SECURITY] [DSA 1787-1] New quagga packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1788-1 [email protected] http://www.debian.org/security/ Florian Weimer May 04, 2009 http://www.debian.org/security/faq -...

DSA-1788-1 quagga - denial of service

Bulletin has no description...

Ubuntu 8.10 : linux regression (USN-661-1)

Version 2.6.27 of the Linux kernel changed the order of options in TCP headers. While this change was RFC-compliant, it was found that some old routers and consumer DSL modems would not route traffic for these systems when TCP timestamps were enabled. As a workaround, TCP timestamps were disabled...

Penetration of the underlying routing techniques-vulnerability warning-the black bar safety net

Source: Huaxia hacking Union Master scan the underlying routing can greatly facilitate invasion within the network,such as enterprise,company,school, etc..if thorough techniques can intercept sensitive information,simplifying the invasion process,and obtain a routing privilege,it can be prepared...

PT-2009-3389 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.25 Description: The issue is related to the icmp send function in the Linux kernel, which does not properly manage the Protocol Independent Destination Cache DST when configured as a router with a REJECT...

DEBIAN-CVE-2009-0804

Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites,...