CVE-2008-2173

Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

CVE-2008-2173

Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

PT-2008-3674 · Avici · Avici Routers

Name of the Vulnerable Software and Affected Versions: Avici routers affected versions not specified Description: The issue allows remote attackers to cause a denial of service, resulting in dropped sessions, via crafted BGP UPDATE messages. This can lead to route flapping. Recommendations: At th...

BGP implementations do not properly handle UPDATE messages

Overview BGP implementations from multiple vendors including Juniper may not properly handle specially crafted BGP UPDATE messages. These vulnerabilities could allow an unauthenticated, remote attacker to cause a denial of service. Disrupting BGP communication could lead to routing instability...

Cisco IOS多播虚拟专用网MDT Data Join消息处理数据泄露漏洞

BUGTRAQ ID: 28464 CVECAN ID: CVE-2008-1156 Cisco IOS是思科网络设备所使用的互联网操作系统。 Cisco IOS在实现多播虚拟专用网（MVPN）时存在漏洞，允许攻击者发送特制的多播分布树（MDT）Data Join消息导致在核心路由器上创建额外的多播状态。 这个漏洞还允许泄露其他MPLS VPN的多播通讯，可以接收连接到同一供应商边界（PE）路由器的VPN的多播通讯。如果要成功利用这个漏洞，攻击者必须知道或猜测到远程PE路由器的边界网管协议（BGP）同层IP地址，以及其他MPLS VPN所使用的多播组的地址。 Cisco IOS 12.4...

OpenBSD BGP daemon crossite scripting

Web-interface crossite scripting...

Debian Security Advisory DSA 850-1 (tcpdump)

The remote host is missing an update to tcpdump announced via advisory DSA 850-1. Vade 79 discovered that the BGP dissector in tcpdump, a powerful tool for network monitoring and data acquisition, does not properly handle RTROUTINGINFO. A specially crafted BGP packet can cause a denial of service...

Debian Security Advisory DSA 1293-1 (quagga)

The remote host is missing an update to quagga announced via advisory DSA 1293-1. OpenVAS Vulnerability Test $Id: deb12931.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1293-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1353-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1059-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 854-1 (tcpdump)

The remote host is missing an update to tcpdump announced via advisory DSA 854-1. Simon Nielsen discovered that the BGP dissector in tcpdump, a powerful tool for network monitoring and data acquisition, does not properly handle a -1 return value from an internal function that decodes data packets...

Debian Security Advisory DSA 1353-1 (tcpdump)

The remote host is missing an update to tcpdump announced via advisory DSA 1353-1. OpenVAS Vulnerability Test $Id: deb13531.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1353-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1059-1 (quagga)

The remote host is missing an update to quagga announced via advisory DSA 1059-1. Konstantin Gavrilenko discovered several vulnerabilities in quagga, the BGP/OSPF/RIP routing daemon. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-2223 Remote attackers...

Debian Security Advisory DSA 206-1 (tcpdump)

The remote host is missing an update to tcpdump announced via advisory DSA 206-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper Networks JUNOS畸形BGP远程拒绝服务漏洞

BUGTRAQ ID: 26869 CNCAN ID:CNCAN-2007121801 Juniper Networks JUNOS是一款网络操作系统。 Juniper Networks JUNOS不正确处理特殊构建的BGP报文，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Juniper Networks JUNOS 8.4 Juniper Networks JUNOS 7.3 升级到JUNOS 8.5R1版本： http://www.juniper.net/...

CVE-2007-6372

Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...

Session fixation

Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...

CVE-2007-6372

Technical details for CVE-2007-6372 are not provided in the connected documents. Public information in the Initial Description is high-level. Monitor for updates from official advisories to obtain affected products, vectors, and fixes.

CVE-2007-6372

Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...

SuSE 10 Security Update : tcpdump (ZYPP Patch Number 4037)

This update fixes a buffer overlow that could be triggered when displaying BGP packets. CVE-2007-3798 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29588;...