7331 matches found
Code injection
Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service device or linecard reload via crafted UD...
Code injection
Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service device or linecard reload via crafted UD...
CVE-2008-3805
CVE-2008-3805 affects Cisco IOS on 10000, uBR10012 and uBR7200 platforms running IOS 12.0–12.4. The vulnerability arises from processing of external UDP IPC packets sent to the 127.0.0.0/8 address space, allowing a remote attacker to cause a denial-of-service (device or linecard reload). The issu...
CVE-2008-3805
Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service device or linecard reload via crafted UD...
CVE-2008-3806
Cisco IOS 12.0–12.4 on Cisco 10000, uBR10012 and uBR7200 Series devices is affected by an IPC UDP channel vulnerability. The IPC channel uses UDP to 127.0.0.0/8 and can be triggered by external UDP packets to cause a reload of the device or linecards, resulting in DoS. The core issue is processin...
Cisco IOS远程IPC拒绝服务漏洞
BUGTRAQ ID: 31363 CVE ID: CVE-2008-3805 CNCVE ID：CNCVE-20083805 Cisco 10000, uBR10012和uBR7200系列设备使用基于UDP的IPC通道，这个通道使用127.0.0.0/8范围的地址和UDP 1975端口。Cisco 10000, uBR10012和uBR7200系列设备运行受此漏洞影响的Cisco IOS会去处理从设备外部发送给UDP 1975端口的IPC消息。这种行为可导致攻击者发送大量数据包导致设备，线路卡重载，造成拒绝服务攻击。 此漏洞的Cisco bug...
CVE-2008-4163
Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service UDP client handler termination via unknown vectors...
ISC BIND 9 for Windows UDP Client Handler Remote DoS
According to its version number, the remote installation of BIND suffers from a vulnerability in which the UDP client handler can be shutdown, which in turn causes the server to stop responding to UDP queries. Note that this issue only exists in the Windows code of BIND 9.5.0-P2-W1 / 9.4.2-P2-W1 ...
dnsmasq: Denial of Service and DNS spoofing
Background Dnsmasq is a lightweight and easily-configurable DNS forwarder and DHCP server. Description Dan Kaminsky of IOActive reported that dnsmasq does not randomize UDP source ports when forwarding DNS queries to a recursing DNS server CVE-2008-1447. Carlos Carvalho reported that dnsmasq in t...
PowerDNS Recursor 3.x < 3.1.6 DNS Predictable Transaction ID (TRXID) Cache Poisoning
According to its self-reported version number, the version of PowerDNS Recursor listening on the remote host is version 3.x prior to 3.1.6. It is, therefore, affected by a cache poisoning vulnerability due to insufficient randomness to calculate TRXID values and UDP source port numbers. A remote...
Debian Security Advisory DSA 1617-1 (refpolicy)
The remote host is missing an update to refpolicy announced via advisory DSA 1617-1. OpenVAS Vulnerability Test $Id: deb16171.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1617-1 refpolicy Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian Security Advisory DSA 1623-1 (dnsmasq)
The remote host is missing an update to dnsmasq announced via advisory DSA 1623-1. OpenVAS Vulnerability Test $Id: deb16231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1623-1 dnsmasq Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Symantec VERITAS Storage Foundation multiple security vulnerabilities
DoS on TCP/4888 request parsing, buffer overflow on UDP/3207 parsing...
Security Best Practice: Familiarize Yourself with the Packet Sanity Protection
The Packet Sanity protection performs several Layer 3 and Layer 4 sanity checks. These include verifying packet size, UDP and TCP header lengths, dropping IP options and verifying the TCP flags.Numerous types of attacks may be hidden in fragmented packets...
openSUSE 10 Security Update : dnsmasq (dnsmasq-5512)
This update of dnsmasq uses random UDP source ports and a random TRXID now. CVE-2008-1447 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dnsmasq-5512. The text description of this plugin is C...
Debian: Security Advisory (DSA-1619-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 5 : dnsmasq (RHSA-2008:0789)
An updated dnsmasq package that implements UDP source-port randomization is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Dnsmasq is lightweight DNS forwarder and DHCP server. It is designed to...
Moderate: Red Hat Security Advisory: dnsmasq security update
An updated dnsmasq package that implements UDP source-port randomization is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Dnsmasq is lightweight DNS forwarder and DHCP server. It is designed to...