EUVD-2005-4435

Malware in sbrugna...

kernel: netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the nftpayload component. An incorrect arithmetic operation when processing VLAN Virtual Local Area Network header bits in double-tagged packets can lead to a heap-buffer-overflow. A local attacker could exploit this ...

CVE-2005-4440

The 802.1q VLAN protocol allows remote attackers to bypass network segmentation and spoof VLAN traffic via a message with two 802.1q tags, which causes the second tag to be redirected from a downstream switch after the first tag has been stripped, as demonstrated by Yersinia, aka "double-tagging...

CVE-2005-4440

The CVE describes a vulnerability in the 802.1q VLAN protocol where a crafted frame containing two 802.1q tags can cause the second tag to be redirected after the first is stripped, enabling a remote attacker to bypass network segmentation and spoof VLANs. Demonstrated by the tool Yersinia (doubl...