CVE-2006-6263: Undefined Security Weakness

Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the packet to the next hop, which might allow remote attackers to bypass policies of certain Internet gateways that drop all source-routed packets...

TIBCO Rendezvous <= 7.4.11 (add router) Remote BOF Exploit

No description provided by source. / Exploit: TIBCO RendezVous remote buffer overflow exploit for Win32 public version Affected products: Tibco RendezOVous version =7.4.11 Multiple Vulnerabilities Author: Andres Tarasco Acua atarasco @ sia.es Advisory: http://www.514.es Url: http://www.sia.es...

Cisco IOS GRE报文路由选项解析溢出漏洞

Cisco互联网操作系统（IOS）是Cisco设备所使用的操作系统。 Cisco Systems IOS在解析包含有GRE源路由信息的GRE报文时存在漏洞，远程攻击者可能导致设备处理报文出错。 如果收到了特制的GRE报文的话，IOS设备没有验证偏移字段是否指向报文内，如果偏移值被设置为负值，IOS直接从包含有IP报文全长的整数中减去了偏移，导致缓冲区访问越界溢出。这可能导致将报文环缓冲区（ring buffer）的其他内存内容解释为负载IP报文并以很大的长度信息重新注入到路由队列中： GRE decapsulated IP 0.3.74.0-0.0.1.30 len=65407,...

Debian DSA-1059-1 : quagga - several vulnerabilities

Konstantin Gavrilenko discovered several vulnerabilities in quagga, the BGP/OSPF/RIP routing daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-2223 Remote attackers may obtain sensitive information via RIPv1 REQUEST packets even if the quagga...

CVE-2004-2665: Undefined Security Weakness

Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport software in HP-UX B.11.00, B.11.04, and B.11.11 before 20040628 allows local users to cause a denial of service via unspecified vectors...

CVE-2006-4795: Undefined Security Weakness

Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport software in HP-UX B.11.11 and B.11.23 before 20060912 allows local users to cause a denial of service via unspecified vectors...

CVE-2006-4650

Cisco IOS 12.0/12.1/12.2 GRE decapsulation vulnerability: missing RFC2784 fixes allow GRE offset overflow during decapsulation, enabling remote crafted packets to enter the routing queue and potentially bypass ACLs. Affected component is GRE IP tunneling handling; root cause is failure to verify ...

CVE-2006-4650: Undefined Security Weakness

Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which allows remote attackers...

Cisco IOS GRE issue

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +---- Title Cisco Systems IOS GRE decapsulation fault Authors FX [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/CiscoGRE.txt Affected Products Cisco IOS Tested on: C3550 IOS 12.119 Cisco Bug ID...

[Full-disclosure] ScatterChat Advisory 2006-02: Win32 Tor Client Routing and Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ScatterChat Advisory 2006-02: Win32 Tor Client Routing and Denial of Service Vulnerabilities Technical Report September 2nd, 2006 CVE ID: CVE-2006-4508 OSVDB: 28276, 28277 SUMMARY ScatterChat http://www.scatterchat.com/ is an instant messaging project...

Multiple tor security vulnerabilities

Maliscious server can cause DoS condition for client or may force client to route traffic to tor network...

[SA21708] Tor Denial of Service and Traffic Routing

TITLE: Tor Denial of Service and Traffic Routing SECUNIA ADVISORY ID: SA21708 VERIFY ADVISORY: http://secunia.com/advisories/21708/ CRITICAL: Less critical IMPACT: Security Bypass, DoS WHERE: From remote SOFTWARE: Tor 0.1.0.x http://secunia.com/product/5269/ Tor 0.1.1.x...

CVE-2006-4112

Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service application hang or "data loss," a differen...

DEBIAN-CVE-2006-4112

Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service application hang or "data loss," a differen...

CVE-2006-4112

Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service application hang or "data loss," a differen...

CVE-2006-4112

Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service application hang or "data loss," a differen...

CVE-2006-4112

Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service application hang or "data loss," a differen...

CVE-2005-2194

The CVE-2005-2194 entry describes an unspecified vulnerability in the Apple Mac OS X kernel prior to 10.4.2 that allows remote attackers to cause a denial of service (kernel panic) via a crafted TCP packet, possibly involving source routing or loose source routing. Affected software is Mac OS X k...

CVE-2005-2194

Unspecified vulnerability in the Apple Mac OS X kernel before 10.4.2 allows remote attackers to cause a denial of service kernel panic via a crafted TCP packet, possibly related to source routing or loose source routing...

CVE-2005-2194: Undefined Security Weakness

Unspecified vulnerability in the Apple Mac OS X kernel before 10.4.2 allows remote attackers to cause a denial of service kernel panic via a crafted TCP packet, possibly related to source routing or loose source routing...