CVE-2008-4404

The CVE family revolves around IPv6 Neighbor Discovery Protocol (NDP) implementation flaws where origin validation of NDP messages is missing. The IBM zSeries description (CVE-2008-4404) notes possible DoS or leakage via spoofed NDP messages that modify the FIB. Related HP-UX entries (CVE-2008-24...

FreeBSD IPv6 Neighbor Discovery Protocol security vulnerability

A malicious IPv6 node sharing a common router but on a different physical segment from another node may be able to spoof Neighbor Discovery messages, allowing it to update router information for the victim node...

IPv6 implementations insecurely update Forwarding Information Base

Overview A vulnerability in some implementations of the IPv6 Neighbor Discovery Protocol may allow a nearby attacker to intercept traffic or cause congested links to become overloaded. Description IPv6 networks use the Neighbor Discovery Protocol NDP to detect and locate routers and other on-link...

Bluetooth Stack Could Allow Remote Code Execution Vulnerability (951376)

This host is missing a critical security update according to Microsoft Bulletin MS08-030. OpenVAS Vulnerability Test $Id: gbms08-030.nasl 5863 2017-04-05 07:38:11Z antu123 $ Bluetooth Stack Could Allow Remote Code Execution Vulnerability 951376 Authors: Chandan S Copyright: Copyright c 2008...

PT-2008-1075 · Bluez +1 · Bluez-Libs-Devel +4

Name of the Vulnerable Software and Affected Versions: bluez-libs versions 3.30 through 3.33 bluez-utils versions 3.30 through 3.33 bluez-libs-devel versions 2.10 through 3.33 bluez-utils-cups versions 2.10 through 3.7 bluez-utils versions prior to 3.36 Description: The issue is related to the...

CVE-2008-1453

The Bluetooth stack in Microsoft Windows XP SP2 and SP3, and Vista Gold and SP1, allows physically proximate attackers to execute arbitrary code via a large series of Service Discovery Protocol SDP packets...

Code injection

The Bluetooth stack in Microsoft Windows XP SP2 and SP3, and Vista Gold and SP1, allows physically proximate attackers to execute arbitrary code via a large series of Service Discovery Protocol SDP packets...

CVE-2008-1453

The Bluetooth stack in Microsoft Windows XP SP2 and SP3, and Vista Gold and SP1, allows physically proximate attackers to execute arbitrary code via a large series of Service Discovery Protocol SDP packets...

CVE-2008-1453

The CVE-2008-1453 issue affects the Windows Bluetooth stack in Windows XP SP2/SP3 and Windows Vista SP1. It arises from how the Bluetooth stack handles a large number of Service Description Protocol (SDP) requests, allowing physically proximate attackers to execute arbitrary code and potentially ...

Microsoft Windows Bluetooth Stack Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability because its implementation of the Bluetooth stack fails to adequately handle a flood of specially crafted SDP Service Discovery Protocol requests. To exploit this issue, an attacker must be within close physical...

Microsoft Windows TCP/IP实现ICMP请求远程拒绝服务漏洞（MS08-001）

BUGTRAQ ID: 27139 CVECAN ID: CVE-2007-0066 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核的TCP/IP实现（tcpip.sys）中处理碎片路由器广播ICMP查询的方式实现上存在漏洞，远程攻击者可能利用此漏洞导致系统崩溃。 匿名攻击者可以通过在网络上向计算机特制的ICMP报文利用此漏洞，导致计算机停止响应和自动重新启动。但利用此漏洞所必须的ICMP路由发现协议（RDP）不是默认启用的。 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2...

Microsoft Windows TCP/IP ICMP Remote Denial Of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability because it fails to adequately handle specially crafted TCP/IP traffic. Attackers can exploit this issue to cause affected computers to stop responding and to automatically restart. Successful attacks will deny...

DEBIAN-CVE-2007-6120

The Bluetooth SDP dissector Wireshark formerly Ethereal 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

Input validation

Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service application termination and execute arbitrary code via crafted Service Discovery Protocol SDP packets, related to insufficient input validation...

CVE-2007-3753

Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service application termination and execute arbitrary code via crafted Service Discovery Protocol SDP packets, related to insufficient input validation...

PT-2007-4994 · Apple · Iphone

Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows physically proximate attackers to cause a denial of service and execute arbitrary code via crafted Service Discovery Protocol SDP packets. This is related to insufficient input validati...

CVE-2005-3921

CVE-2005-3921 is a cross-site scripting (XSS) vulnerability affecting Cisco IOS Web Server in IOS 12.0(2a). The issue allows remote attackers to inject arbitrary web script or HTML when an administrator views certain pages, via (1) HTML-containing packets shown through the HTTP interface to memor...

CVE-2001-1552

ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol SSDP message. NOTE: multiple replies to the original post state that the problem could not be reproduced...

CVE-2001-1071

Cisco IOS 12.2 and earlier running Cisco Discovery Protocol CDP allows remote attackers to cause a denial of service memory consumption via a flood of CDP neighbor announcements...

Cisco CDP attacks

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815++ Authors FX [email protected] FtR [email protected] kim0 [email protected] smoovB not disclosed Phenoelit Group http://www.phenoelit.de Affected Products Cisco IOS - several versions Known vulnerable combinations: Cisco 1005 IOS 11.1. Cisco 16...