FreeBSD -- IPv6 Routing Header 0 is dangerous

Problem Description There is no mechanism for preventing IPv6 routing headers from being used to route packets over the same links many times. Impact An attacker can "amplify" a denial of service attack against a link between two vulnerable hosts; that is, by sending a small volume of traffic the...

Fedora Core 6 : kernel-2.6.20-1.2944.fc6 (2007-432)

Updated to upstream linux kernel 2.6.20.6: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.5 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.6 CVE-2007-1357: The atalksumskb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote...

CVE-2007-1994

Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport functionality in HP-UX B.11.00 allows local users to cause a denial of service via unknown vectors. NOTE: due to lack of vendor details, it is not clear whether this is the same as CVE-2007-0916...

PPPOE authentication the defect caused the harm-vulnerability warning-the black bar safety net

Author: black lantern Black Mask） Source: Black Mask'blog The article has a table in the hacker X-Files 2 0 0 7 in the first period,reproduced please specify! With the network technology rapid development, the different access methods and thus also into our lives at the time, from the most common...

Design/Logic Flaw

Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors...

Design/Logic Flaw

Cisco IOS allows remote attackers to cause a denial of service crash via a crafted IPv6 Type 0 Routing header...

CVE-2007-0488

The Huawei Versatile Routing Platform 1.43 2500E-003 firmware on the Quidway R1600 Router, and possibly other models, allows remote attackers to cause a denial of service device crash via a long show arp command...

CVE-2007-0488: Undefined Security Weakness

The Huawei Versatile Routing Platform 1.43 2500E-003 firmware on the Quidway R1600 Router, and possibly other models, allows remote attackers to cause a denial of service device crash via a long show arp command...

CVE-2007-0488

CVE-2007-0488 affects Huawei Versatile Routing Platform firmware, specifically 1.43 2500E-003 on the Quidway R1600 Router (and possibly other models). The issue allows remote attackers to cause a device crash (DoS) by sending a long show arp command. The connected sources do not provide detailed ...

CVE-2007-0481

CVE-2007-0481 affects Cisco IOS IPv6 handling, allowing remote attackers to crash devices by sending a crafted IPv6 Type 0 Routing header. The issue is a DoS with potential for device instability; exploitation requires sending a malicious IPv6 routing header to a Cisco IOS device. Connected docs ...

CVE-2007-0481: Undefined Security Weakness

Cisco IOS allows remote attackers to cause a denial of service crash via a crafted IPv6 Type 0 Routing header...

CVE-2007-0488

The Huawei Versatile Routing Platform 1.43 2500E-003 firmware on the Quidway R1600 Router, and possibly other models, allows remote attackers to cause a denial of service device crash via a long show arp command...

IPv6 Routing Header Vulnerability

...

[Full-disclosure] Cisco Security Advisory: IPv6 Routing Header Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: IPv6 Routing Header Vulnerability Advisory ID: cisco-sa-20070124-IOS-IPv6 http://www.cisco.com/warp/public/707/cisco-sa-20070124-IOS-IPv6.shtml Revision 1.0 For Public Release 2007 January 24 1600 UTC GMT -...

Cisco routers IPv6 DoS

Router crash on parsing IPv6 packet RH routing header...

CVE-2006-6263

Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the packet to the next hop, which might allow remote attackers to bypass policies of certain Internet gateways that drop all source-routed packets...

CVE-2006-6263

Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the packet to the next hop, which might allow remote attackers to bypass policies of certain Internet gateways that drop all source-routed packets...

CVE-2006-6263

Summary: CVE-2006-6263 involves Teredo clients when source routing is enabled. The issue arises when an encapsulated IPv6 packet contains a Routing header; the client may forward the packet to the next hop, potentially allowing remote actors to bypass policies on gateways that drop all source-rou...

CVE-2006-6263

Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the packet to the next hop, which might allow remote attackers to bypass policies of certain Internet gateways that drop all source-routed packets...

CVE-2006-6263: Undefined Security Weakness

Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the packet to the next hop, which might allow remote attackers to bypass policies of certain Internet gateways that drop all source-routed packets...