CVE-2011-1871

Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service reboot via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."...

CVE-2011-1871

CVE-2011-1871 affects the Windows TCP/IP stack (Tcpip.sys) on Windows Vista SP2, Windows Server 2008 SP2/R2 and Windows 7 SP1. A remote attacker can send crafted ICMP messages to cause a denial of service (reboot). The vulnerability is addressed by MS11-064; apply the Microsoft patch to mitigate....

CVE-2011-1965: Undefined Security Weakness

Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service reboot via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."...

CVE-2011-1871: Undefined Security Weakness

Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service reboot via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."...

CVE-2010-1906

tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe\RepairServicepipecompany named pipe, which allows remote authenticated users to execute arbitrary code by...

Code injection

tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe\RepairServicepipecompany named pipe, which allows remote authenticated users to execute arbitrary code by...

CVE-2010-1906

tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe\RepairServicepipecompany named pipe, which allows remote authenticated users to execute arbitrary code by...

Microsoft Windows TCP/IP协议驱动远程溢出漏洞（MS06-032）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的TCP/IP协议驱动处理特定畸形的IP源路由报文时存在缓冲区溢出漏洞，远程攻击者可以通过发送有Loose Source and Record Route选项的特制ICMP报文触发这个漏洞，导致tcpip.sys或ntoskrnl.exe中出现错误而造成拒绝服务或执行任意指令。 默认情况下，Windows系统的路由及远程访问服务是关闭的，也就是说默认情况下系统不受此漏洞影响。 Microsoft Windows XP SP2 Microsoft Windows XP SP1...

MS Windows TCP/IP Protocol Driver Remote Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ================================================================ MS Windows TCP/IP Protocol Driver Remote Buffer Overflow Exploit ================================================================ / Windows TCP/IP source routing poc C version... by...

Server crash on ICMP packets with Loose Source and Record Route IP options.

Short message translation: There are DoS conditions in Windows 2000 built-in NAT server. Tested configuration: Windows 2000 English Standard/Advanced Service Pack 4 + Update Rollup 1 for Service Pack 4 with NAT server enabled. While routing packets with options "Loose Source and Record Route"...

igmp v3 dos

Приветсвую. Реализация уязвимости. Драйвер tcpip.sys входит в бесконечный цикл. Так как при получении IGMP v3 пакета он ишет опцию Router Alert, но находит 0x0 - интерпритирует это как как длину и прибавляет к индексу. Индекс в итоге не меняется и он опять считывает ту же самую опцию, результат -...

DOS во встроенном NAT сервере Windows 2000

Обнаружил dos во встроенном NAT сервере Windows 2000 Конфигурация проверенных серверов: Windows 2000 English Standard/Advanced Service Pack 4 + Update Rollup 1 for Service Pack 4 с установленным NAT сервером. При прохождении ip пакетов через сервер, с включенной опцией "Loose Source and Record...

CVE-1999-1157

The issue (CVE-1999-1157) affects Tcpip.sys on Windows NT 4.0 before SP4. A remote attacker can cause denial of service by sending an ICMP Subnet Mask Address Request when multiple IP addresses are bound to the same network interface. The vulnerability impact is described as availability partial....

CVE-1999-1157: Undefined Security Weakness

Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface...