CVE-2002-1937

Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator's password...

Cisco IOS EIGRP Network DoS

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +++- Title Cisco Systems IOS EIGRP Network Denial of Service Authors FX [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/CiscoEIGRP.txt Affected Products Cisco IOS Tested on: IOS 11.3 IOS 12.019...

CVE-2002-0885

Multiple buffer overflows in in.rarpd ARP server on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions 1 syserr and 2 error...

CVE-2002-0884

Multiple format string vulnerabilities in in.rarpd ARP server on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions 1 syserr and 2 error...

Re: хэндшейк ICQ

Hello, 3APA3A! Если не сложно, кинь advisory на [email protected]. Можно вместе с программой, положу на www.security.nnov.ru. See attach. Адвайз писать смысла нет, ибо тезис про "шифрование" в аське касается всех версий протокола, его использовавших. Насколько я знаю, в 7 версии эту фигню...

[security bulletin] SSRT-547 HP Tru64 UNIX Potential Security Vulnerabilities TPC/IP, FTPD, ARP

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: SSRT-547 HP Tru64 UNIX Potential Security Vulnerabilities TPC/IP, FTPD, ARP REVISION: 0 NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. RELEASE DATE: 10 September, 2002 SEVERITY:...

CVE-2002-0884

CVE-2002-0884 describes multiple format string vulnerabilities in the ARP server component in.rarpd affecting Solaris, Caldera UnixWare and Open UNIX (and possibly other OSes). The flaw allows remote code execution via improper handling of format strings in the functions (1) syserr and (2) error....

CVE-2002-0885

The CVE-2002-0885 entry describes multiple buffer overflows in in.rarpd (the ARP server) on Solaris and potentially other OSes (Caldera UnixWare, Open UNIX). The underlying issue is a vulnerability in functions (1) syserr and (2) error that could allow remote attackers to execute arbitrary code. ...

CVE-2002-0884

Multiple format string vulnerabilities in in.rarpd ARP server on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions 1 syserr and 2 error...

CVE-2002-0885

Multiple buffer overflows in in.rarpd ARP server on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions 1 syserr and 2 error...

Phenoelit Advisory 0815 ++ -- Brick

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 ++- Authors FX [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de http://www.phenoelit.de/stuff/LucentBrick.txt Affected Products Lucent LSMS 5.5 Lucent Brick, Bridging VPN Firewall Lucent Bug ID: Not assigned...

CVE-2002-0438

ZyXEL ZyWALL 10 before 3.50 allows remote attackers to cause a denial of service via an ARP packet with the firewall's IP address and an incorrect MAC address, which causes the firewall to disable the LAN interface...

CVE-2001-0895

Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP...

CVE-2001-0895

CVE-2001-0895 describes a Cisco IOS ARP Table Overwrite DoS. It affects multiple Cisco networking products where an attacker can send ARP packets on the local network with the router’s IP but a different MAC address, causing the router to overwrite its ARP table entry with the attacker’s MAC. The...

CVE-2002-0438

ZyXEL ZyWALL 10 before 3.50 allows remote attackers to cause a denial of service via an ARP packet with the firewall's IP address and an incorrect MAC address, which causes the firewall to disable the LAN interface...

CVE-2002-0438

CVE-2002-0438 affects ZyXEL ZyWALL 10; firmware versions before 3.50 are vulnerable to a crafted ARP packet using the firewall’s IP and a malformed MAC, causing the firewall to disable its LAN interface (DoS). The referenced fix is a ZyWALL 10 firmware update to 3.50 (or newer). If exploitation d...

Cisco IOS ARP Table Overwrite DoS (CSCdu81936)

It is possible to send an Address Resolution Protocol ARP packet on a local broadcast interface for example, Ethernet, cable, Token Ring, FDDI which could cause a router or switch running specific versions of Cisco IOS Software Release to stop sending and receiving ARP packets on the local router...

arp-DoS против ZyXel ZyWALL10

Можно вызвать отказ интерфейса послав arp-пакет с собственного IP Маршрутизатора с неверным MAC...

ZyXEL ZyWALL10 DoS

vendor status About half a year ago I found a 'funny' DoS condition in the ZyWALL10. ZyXEL was informed, and they at least confirmed the bug, but i believe that's all i heard. According to www.zyxel.com a new firmware for the ZyWALL10 was released 2002/01/10 - i wrote an email to a ZyXEL employee...

Cisco Security Advisory: IOS ARP Table Overwrite Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco IOS ARP Table Overwrite Vulnerability ========================================================================= Revision 1.0 For Release 2001 November 15 08:00 AM US/Pacific UTC -0700 -...