EUVD-2009-0129

Malware in sbrugna...

IBM Datapower XS40畸形ICMP报文拒绝服务漏洞

Bugraq ID: 37952 IBM Datapower XS40是一款安全网关解决方案。 IBM Datapower XS40设备不正确处理ICMP畸形报文，远程攻击者可以利用漏洞使设备挂起，造成拒绝服务攻击。 发送IP目的地址为0.0.0.0的ICMP报文到QLOGIC接口，可使接口变慢，多次发送此类报文数据可导致服务停止响应。 IBM Datapower XS40 3.7.2.1 用户可参考如下安全公告获得补丁信息： http://www-01.ibm.com/support/docview.wss?rs=2362&uid=swg1IC61364...

IBM DataPower XS40 security gateway DoS

ICMP packet with destination address 0.0.0.0 causes device to hang...

[IBM Datapower XS40] Denial of Service

It appears it is possible to disable the IBM DataPower XS40 Security Gateway device by sending a malformed packet to the network interface. The device will hang up itself without being able to recover from it no auto-reboot. Tested vulnerable firmware is 3.7.2.1 Issue fixed according to vendor in...

[IBM Datapower XS40] Denial of Service

It appears it is possible to crash the IBM DataPower XS40 Security Gateway device by sending a simple random? string to it, over an established SSL-connection. The device reboots as a response to the input. Tested vulnerable firmware is 3.6.1.5 Issue fixed as tested in 3.6.1.12 Tested as follows...

IBM DataPower XS40 Security Gateway DoS

Crash on malformed SSL data...