EUVD-2009-0129

Malware in sbrugna...

IBM Datapower XS40畸形ICMP报文拒绝服务漏洞

Bugraq ID: 37952 IBM Datapower XS40是一款安全网关解决方案。 IBM Datapower XS40设备不正确处理ICMP畸形报文，远程攻击者可以利用漏洞使设备挂起，造成拒绝服务攻击。 发送IP目的地址为0.0.0.0的ICMP报文到QLOGIC接口，可使接口变慢，多次发送此类报文数据可导致服务停止响应。 IBM Datapower XS40 3.7.2.1 用户可参考如下安全公告获得补丁信息： http://www-01.ibm.com/support/docview.wss?rs=2362&uid=swg1IC61364...

[IBM Datapower XS40] Denial of Service

It appears it is possible to disable the IBM DataPower XS40 Security Gateway device by sending a malformed packet to the network interface. The device will hang up itself without being able to recover from it no auto-reboot. Tested vulnerable firmware is 3.7.2.1 Issue fixed according to vendor in...

IBM DataPower XS40 security gateway DoS

ICMP packet with destination address 0.0.0.0 causes device to hang...

IBM DataPower XS40 Security Gateway DoS

Crash on malformed SSL data...

[IBM Datapower XS40] Denial of Service

It appears it is possible to crash the IBM DataPower XS40 Security Gateway device by sending a simple random? string to it, over an established SSL-connection. The device reboots as a response to the input. Tested vulnerable firmware is 3.6.1.5 Issue fixed as tested in 3.6.1.12 Tested as follows...