Cisco PIX / Adaptive Security Appliance DoS

Crash on TTL processing if decrement-ttl enabled...

Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability Advisory ID: cisco-sa-20080123-asa http://www.cisco.com/warp/public/707/cisco-sa-20080123-asa.shtml Revision 1.0 For Public Release 2008 January 23 1600 UTC GMT...

PT-2008-1691 · Cisco · Cisco 5500 Series Adaptive Security Appliance +2

Name of the Vulnerable Software and Affected Versions: Cisco PIX 500 Series Security Appliance versions prior to 7.236 Cisco 5500 Series Adaptive Security Appliance ASA versions prior to 8.03 Description: The issue allows remote attackers to cause a denial of service, resulting in a device reload...

CVE-2008-0028: Undefined Security Weakness

Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance ASA before 7.236 and 8.03, when the Time-to-Live TTL decrement feature is enabled, allows remote attackers to cause a denial of service device reload via a crafted IP packet...

DEBIAN-CVE-2006-4252

PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service resource exhaustion and application crash via a CNAME record with a zero TTL, which triggers an infinite loop...

CVE-2006-4252

PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service resource exhaustion and application crash via a CNAME record with a zero TTL, which triggers an infinite loop...

CVE-2006-4252

PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service resource exhaustion and application crash via a CNAME record with a zero TTL, which triggers an infinite loop...

CVE-2006-4252

PowerDNS Recursor (3.1.3 and earlier) is affected by CVE-2006-4252: processing a CNAME record with a zero TTL can trigger an infinite loop, causing resource exhaustion and an application crash (denial of service). Affected software is the PowerDNS Recursor; remediation is to upgrade to 3.1.4 or l...

CVE-2006-4252: Undefined Security Weakness

PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service resource exhaustion and application crash via a CNAME record with a zero TTL, which triggers an infinite loop...

Cisco PIX TCP connection DoS

Packets from the same hosts are blocked for few minutes if packet with invalid checksum, or with 1 byte data or of predefined TTL is received...

CVE-2005-3774: Undefined Security Weakness

Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service blocked new connections via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including 1 SYN packets with invalid checksums, which d...

DEBIAN-CVE-2005-2317

Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLISTTTL is greater than 0 or MACLISTDISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies...

CVE-2003-0914

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL time-to-live value...

CVE-2003-0914

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL time-to-live value...

CVE-2003-0914: Undefined Security Weakness

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL time-to-live value...

Cisco IOS - IPv4 Packets Denial of Service

Cisco IOS - IPv4 Packets Denial of Service / ShadowChode - Cisco IOS IPv4 Packet Processing Denial of Service Exploit Ping target router/switch for TTL to host. Subtract that number from 255 and use that TTL on the command line. The TTL must equal 0 or 1 when it reaches the target. The target mus...

Cisco IOS - IPv4 Packets Denial of Service

/ ShadowChode - Cisco IOS IPv4 Packet Processing Denial of Service Exploit Ping target router/switch for TTL to host. Subtract that number from 255 and use that TTL on the command line. The TTL must equal 0 or 1 when it reaches the target. The target must accept packets to the given target...

Cisco IOS IPv4 Packets Denial of Service Exploit

Exploit for hardware platform in category dos / poc ================================================ Cisco IOS IPv4 Packets Denial of Service Exploit ================================================ / ShadowChode - Cisco IOS IPv4 Packet Processing Denial of Service Exploit Ping target router/swit...

Cisco IOS IPv4 Packets Denial of Service Exploit

No description provided by source. / ShadowChode - Cisco IOS IPv4 Packet Processing Denial of Service Exploit Ping target router/switch for TTL to host. Subtract that number from 255 and use that TTL on the command line. The TTL must equal 0 or 1 when it reaches the target. The target must accept...

CVE-2002-0514

PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to determine if a port is being filtered because the TTL is different than the default TTL...