DoS против OpenBSD

Система падает при большом числе ARP-запросов в секунду...

OpenBSD 2.x - Pending ARP Request Remote Denial of Service

OpenBSD 2.x - Pending ARP Request Remote Denial of Service // source: https://www.securityfocus.com/bid/1759/info OpenBSD is vulnerable to a remotely exploitable denial of service condition. The problem seems to be a lack of limits on the storage of pending arp requests, and a failure to handle t...

OpenBSD 2.x - Pending ARP Request Remote Denial of Service

// source: https://www.securityfocus.com/bid/1759/info OpenBSD is vulnerable to a remotely exploitable denial of service condition. The problem seems to be a lack of limits on the storage of pending arp requests, and a failure to handle the condition of too many. If an attacker somehow causes a...

CVE-2000-0612

CVE-2000-0612 affects Windows 95 and Windows 98 ; spoofed ARP packets allow remote attackers to overwrite static ARP cache entries. The connected records confirm the impact but do not include a provided patch or concrete mitigation details in the supplied documents.

CVE-2000-0612

Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite static entries in the cache table...

CVE-2000-0612

Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite static entries in the cache table...

CVE-1999-0859

Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly...

CVE-1999-0859

The CVE-1999-0859 entry concerns the Solaris arp utility. The description states that local users can read files using the -f parameter, which lists lines in the file that do not parse properly, indicating a local-height confidentiality impact. The available sources (NVD CVE record, CVE List entr...

CVE-1999-0667

The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service...

CVE-1999-0667

CVE-1999-0667 describes an ARP spoofing vulnerability: any host can spoof ARP replies to poison ARP caches, enabling IP address spoofing and denial of service. The issue affects ARP processing and is consistently described across sources (NVD, Red Hat, CIRCL, CVE lists) as allowing spoofed ARP re...

CVE-1999-0444

Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files...

CVE-1999-0444

CVE-1999-0444 : Multiple sources (including PT-1999-1127) confirm a denial-of-service through spoofed ARP packets on Windows. The vulnerability enables remote attackers to trigger a splash/message box per ARP packet or flood log files, causing instability. The available connected documents do not...

CVE-1999-0763

CVE-1999-0763 affects NetBSD on multi-homed hosts: ARP traffic on one network can modify ARP entries on a different connected network, enabling cross-network ARP manipulation. This is described consistently across the NVD entry and Red Hat’s security page. No explicit remediation steps are provid...

CVE-1999-0763

NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network...

CVE-1999-0764

NetBSD ARP handling allows ARP packets to overwrite static ARP entries. This can affect ownership of IP-to-MAC mappings, with partial integrity and availability impact as per NVD metrics. The exact affected NetBSD versions, vulnerable code path, exploit details, and official remediation are not p...

CVE-1999-0764

NetBSD allows ARP packets to overwrite static ARP entries...

solaris.chkperm+arp.txt

Greetings, OVERVIEW /usr/vmsys/bin/chkperm and /usr/sbin/arp can be used to read bin-owned files. BACKGROUND All my testing was done on Solaris 2.7 and 2.6 SPARC edition. DETAILS Vuln 1 - chkperm This one isn't nearly as interesting as the instant-shell variety. Here's how it works: chkperm is...

CVE-1999-0859

Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly...

CVE-1999-1548

Cabletron SmartSwitch Router SSR 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit...

nmap_cisco_dos.txt

From: "Lancashire, Andrew" This is to clarify what is being put out by Cisco and what we are being told by Cisco. Two e-mails below is what Cisco is telling us and makes alot more sense than what Cisco is telling Bugtraq. The last post to Bugtraq made mention that the arp cache was filling up and...