CVE-2009-1572

The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...

[SECURITY] [DSA 1787-1] New quagga packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1788-1 [email protected] http://www.debian.org/security/ Florian Weimer May 04, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1787-1] New quagga packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1788-1 [email protected] http://www.debian.org/security/ Florian Weimer May 04, 2009 http://www.debian.org/security/faq -...

quagga -- Denial of Service

Debian Security Team reports: It was discovered that Quagga, an IP routing daemon, could no longer process the Internet routing table due to broken handling of multiple 4-byte AS numbers in an AS path. If such a prefix is received, the BGP daemon crashes with an assert failure leading to a denial...

DSA-1788-1 quagga - denial of service

Bulletin has no description...

FreeBSD : multiple vulnerabilities in ethereal (cdf18ed9-7f4a-11d8-9645-0020ed76ef5a)

Stefan Esser of e-matters Security discovered a baker's dozen of buffer overflows in Ethereal's decoders, including : - NetFlow - IGAP - EIGRP - PGM - IRDA - BGP - ISUP - TCAP - UCP In addition, a vulnerability in the RADIUS decoder was found by Jonathan Heusser. Finally, there is one uncredited...

Mandriva Update for tcpdump MDKSA-2007:148 (tcpdump)

Check for the Version of tcpdump OpenVAS Vulnerability Test Mandriva Update for tcpdump MDKSA-2007:148 tcpdump Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Ubuntu Update for tcpdump vulnerability USN-492-1

Ubuntu Update for Linux kernel vulnerabilities USN-492-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4921.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for tcpdump vulnerability USN-492-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

OpenBSD BGP UPDATE消息远程拒绝服务漏洞

BUGTRAQ ID: 33553 OpenBSD是一款开放源代码Unix类操作系统。 OpenBSD系统的BGP协议在处理畸形结构的UPDATE消息时存在漏洞，远程攻击者可能利用此漏洞导致BGP服务不可用。 当BGP UPDATE消息中包含一个无效的AS4PATH时，会导致OpenBSD处理出错导致会话中止，远程攻击者可以通过构造恶意的请求导致BGP服务不可用。 OpenBSD 4.4 OpenBSD 4.3 厂商补丁： OpenBSD ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： OpenBSD 4.3:...

asn-query NSE Script

Maps IP addresses to autonomous system AS numbers. The script works by sending DNS TXT queries to a DNS server which in turn queries a third-party service provided by Team Cymru using an in-addr.arpa style zone set up especially for use by Nmap. The responses to these queries contain both Origin...

Cisco Security Advisory: Cisco IOS MPLS VPN May Leak Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS MPLS VPN May Leak Information Advisory ID: cisco-sa-20080924-vpn http://www.cisco.com/warp/public/707/cisco-sa-20080924-vpn.shtml Revision 1.0 For Public Release 2008 September 24 1600 UTC GMT -...

Cisco IOS MPLS VPN May Leak Information

Devices running Cisco IOS versions 12.0S, 12.2, 12.3 or 12.4 and configured for Multiprotocol Label Switching MPLS Virtual Private Networks VPNs or VPN Routing and Forwarding Lite VRF Lite and using Border Gateway Protocol BGP between Customer Edge CE and Provider Edge PE devices may permit...

Gentoo Security Advisory GLSA 200605-15 (quagga)

The remote host is missing updates announced in advisory GLSA 200605-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-2173

Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

CVE-2008-2172

Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

Design/Logic Flaw

Unspecified vulnerability in AlaxalA AX routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

Design/Logic Flaw

Unspecified vulnerability in Century routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

Design/Logic Flaw

Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

Design/Logic Flaw

Unspecified vulnerability in Avici routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

CVE-2008-2170

Unspecified vulnerability in Century routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...