Racoon IPSec key exchange DoS

It's possible to disrupts established IPSec tunnels...

Unix Command, Interact with Established Connection

Interacts with a shell on an established socket connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 0 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions...

Windows Meterpreter (skape/jt Injection), Find Tag Ordinal Stager

Inject the meterpreter server DLL staged. Use an established connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 92 include Msf::Payload::Stager include Msf::Payload::Window...

CVE-1999-1582

The CVE-1999-1582 entry concerns the Cisco PIX firewall and a behavior of the established command. According to the description, this built-in functionality can allow connections from a single host to arbitrary ports of a target host if an alternative conduit has already been permitted, which may...

CVE-2004-1637

The CVE-2004-1637 entry concerns the Hawking Technologies HAR11A modem/router. The affected component is the device itself, where remote attackers can connect to port 254 to view a management interface and information on established connections, exposing sensitive information. The NVD metrics ass...

RealVNC DoS

DoS on large number of established connections...

PIX 'established' and 'conduit' command may have unexpected interactions

Overview A somewhat common configuration of Cisco PIX firewalls may permit a window of opportunity in which an intruder can bypass the firewall. This problem was first publicly described in July, 1998. Description Cisco PIX firewalls protecting servers which offer service to the internet-at-large...

CVE-1999-1466

The CVE-1999-1466 entry concerns Cisco routers (versions 8.2–9.1) where remote attackers can bypass ACLs when extended IP access lists are configured on certain interfaces with the IP route cache enabled and the access list uses the established keyword. The provided sources confirm the vulnerabil...

Security Advisory: FreeBSD-SA-01:08.ipfw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:08 Security Advisory FreeBSD, Inc. Topic: ipfw/ip6fw allows bypassing of 'established' keyword Category: core Module: kernel Announced: 2001-01-23 Credits: Aragon Gouveia...

Дырка в ipfw

Правило established не срабатывает на пакетах, где вместе с SYN установлен флаг ECE...

FreeBSD-SA-01:08.ipfw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:08 Security Advisory FreeBSD, Inc. Topic: ipfw/ip6fw allows bypassing of 'established' keyword Category: core Module: kernel Announced: 2001-01-23 Credits: Aragon Gouveia...

CVE-1999-0162

The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering...

PT-1999-1346 · Cisco · Cisco Gigabit Switch

Name of the Vulnerable Software and Affected Versions: Cisco Gigabit Switch routers affected versions not specified Description: The issue is related to the improper handling of the established keyword in an access list, allowing remote attackers to forward unauthorized packets. Recommendations: ...

PT-1999-1099 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux versions prior to 2.0.36 Description: The issue allows remote attackers to spoof a TCP connection and pass data to the application layer before fully establishing the connection. Recommendations: For Linux versions prior to 2.0.36, upda...

PT-1998-1036 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS software affected versions not specified Description: The issue allows an attacker to bypass filtering due to the "established" keyword in some Cisco IOS software. Recommendations: At the moment, there is no information about a newe...

CVE-1999-1582

By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if they do not...