openSUSE 10 Security Update : tcpdump (tcpdump-4036)

This update fixes a buffer overlow that could be triggered when displaying BGP packets CVE-2007-3798. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update tcpdump-4036. The text description of this...

Debian DSA-1382-1 : quagga - NULL pointer dereference

It was discovered that BGP peers can trigger a NULL pointer dereference in the BGP daemon if debug logging is enabled, causing the BGP daemon to crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

[SECURITY] [DSA 1379-1] New quagga packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA 1379-1 [email protected] http://www.debian.org/security/ Florian Weimer October 1st, 2007 http://www.debian.org/security/faq -...

DSA-1382-1 quagga

Bulletin has no description...

Quagga bgpd BGP routing daemon DoS

Crash on invalid OPEN and UPDATE requests...

[Full-disclosure] [MU-200709-01] Quagga bgpd Remote Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Quagga bgpd Remote Denial of Service Vulnerability MU-200709-01 September 12, 2007 http://labs.musecurity.com/advisories.html Affected Products/Versions: Quagga 0.99.8 Product Overview: Quagga is a routing software suite. Quagga bgpd implements the BG...

CVE-2007-4826

bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service crash via a malformed 1 OPEN message or 2 a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled...

Null pointer dereference

bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service crash via a malformed 1 OPEN message or 2 a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled...

CVE-2007-4826

bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service crash via a malformed 1 OPEN message or 2 a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled...

CVE-2007-4826

bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service crash via a malformed 1 OPEN message or 2 a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled...

CVE-2007-4826

CVE-2007-4826 affects the Quagga bgpd daemon prior to 0.99.9. Affected condition: explicitly configured BGP peers can crash bgpd via a malformed (1) OPEN message or (2) a COMMUNITY attribute, triggering a NULL pointer dereference. Note: vector 2 exists only when debugging is enabled. Remediation:...

CVE-2007-4826

bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service crash via a malformed 1 OPEN message or 2 a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled...

CVE-2007-4430

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service device restart and BGP routing table rebuild via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environment...

Command injection

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service device restart and BGP routing table rebuild via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environment...

CVE-2007-4430

CVE-2007-4430 affects Cisco IOS 12.0–12.4, where certain regular expressions used by the command “show ip bgp regexp” can trigger a denial-of-service condition. The issue enables context-dependent attackers to cause a device restart and BGP routing-table rebuild, with unauthenticated remote acces...

CVE-2007-4430

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service device restart and BGP routing table rebuild via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environment...

Cisco IOS Show IP BGP Regexp远程拒绝服务漏洞

Cisco IOS是一款流行的网络操作系统。 Cisco IOS不正确处理部分CLI命令，远程攻击者可以利用漏洞对系统进行拒绝服务攻击，可导致设备重启。 问题存在于处理"show ip bgp regexp"命令时，如果提交部分规则表达式作为参数并执行，结果可导致路由器重启或重建BGP路由表。如果多次成功利用此问题，可导致路由器变的重复不可用。 Cisco IOS XR 3.4.1 Cisco IOS XR 3.4 Cisco IOS XR 3.3.4 Cisco IOS XR 3.3.3 Cisco IOS XR 3.3.2 Cisco IOS XR 3.3.1 Cisco IOS X...

Cisco IOS 12.3 - Show IP BGP Regexp Remote Denial of Service

source: https://www.securityfocus.com/bid/25352/info Cisco IOS is prone to a remote denial-of-service vulnerability because the software fails to properly handle certain CLI commands. To issue commands that trigger this vulnerability, attackers must be able to successfully authenticate to...

Cisco IOS 12.3 - Show IP BGP Regexp Remote Denial of Service

Cisco IOS 12.3 - Show IP BGP Regexp Remote Denial of Service source: https://www.securityfocus.com/bid/25352/info Cisco IOS is prone to a remote denial-of-service vulnerability because the software fails to properly handle certain CLI commands. To issue commands that trigger this vulnerability,...

Debian DSA-1353-1 : tcpdump - integer overflow

It was discovered that an integer overflow in the BGP dissector of tcpdump, a powerful tool for network monitoring and data acquisition, may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...