FreeBSD -- Infinite loop in SACK handling

Problem description: When insufficient memory is available to handle an incoming selective acknowledgement, the TCP/IP stack may enter an infinite loop. Impact: By opening a TCP connection and sending a carefully crafted series of packets, an attacker may be able to cause a denial of service...

Snort <= 2.4.0 SACK TCP Option Error Handling

Snort = 2.4.0 SACK TCP Option Error Handling Package: Snort 2.4.0 And previous versions Vendor url: http://www.snort.org Class: Error Handling Exceptional Conditions Risk: High Credits: A. Alejandro Hernndez Hernndez Contact: nitrousatvulnfactdotcom BACKGROUND Snort is an open source network...

Snort 2.x - PrintTcpOptions Remote Denial of Service

Snort 2.x - PrintTcpOptions Remote Denial of Service // source: https://www.securityfocus.com/bid/14811/info Snort is reported prone to a remote denial of service vulnerability. The vulnerability is reported to exist in the 'PrintTcpOptions' function of 'log.c', and is a result of a failure to...

Snort <= 2.4.0 SACK TCP Option Error Handling Denial of Service Exploit

No description provided by source. /------------------------------------------ ||------+ Snort = 2.4.0 Trigger p0c +------|| |||| ||--= nitrous at vulnfact dot com =--|| ||--= VulnFact Security Labs =--|| ||--= 21 Ago 2oo5 =--|| ||--= Mexico =--|| |||| -- Snort = 2.4.0 SACK TCP Option Error...

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service

/------------------------------------------ ||------+ Snort thsum es 0 cero, por lo tanto, el primer Router por donde pase este paquete lo descartara por no tener una checksum valida. RFC 1072 - TCP Extensions for Long-Delay Paths 3.2- TCP SACK Option: ... Kind: 5 Length: Variable...

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service /------------------------------------------ ||------+ Snort thsum es 0 cero, por lo tanto, el primer Router por donde pase este paquete lo descartara por no tener una checksum valida. RFC 1072 - TCP Extensions for Long-Delay Paths 3.2...

CVE-2005-0960

Multiple vulnerabilities in the SACK functionality in 1 tcpinput.c and 2 tcpusrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service memory exhaustion or system crash...

CVE-2005-0960

Multiple vulnerabilities in the SACK functionality in 1 tcpinput.c and 2 tcpusrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service memory exhaustion or system crash...

CVE-2005-0960

CVE-2005-0960 affects OpenBSD 3.5 and 3.6, targeting the SACK implementation in tcp_input.c and tcp_usrreq.c. The vulnerability allows remote attackers to cause a denial of service via memory exhaustion or system crash. No remediation details are provided in the available documents; exploitation ...

CVE-2005-0960: Undefined Security Weakness

Multiple vulnerabilities in the SACK functionality in 1 tcpinput.c and 2 tcpusrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service memory exhaustion or system crash...

CVE-2004-0375

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service infinite loop via a TCP packet with 1 SACK option or 2 Alternate Checksum Dat...