204 matches found
Linux kernel 2.6.x iptables '--syn'规则安全绕过漏洞
Bugtraq ID: 53733 CVE ID：CVE-2012-2663 Linux是一款开源的操作系统。 Linux Kernel iptables在某些情况下不正确处理SYN+FIN，攻击者可以发送SYN/FIN绕过所有包含--syn的访问规则，未授权创建连接。 0 Linux kernel 2.6.x 厂商解决方案 Linux ----- 用户可参考如下供应商提供的安全公告获得补丁信息：...
Design/Logic Flaw
Unspecified vulnerability in the PeopleSoft Enterprise FIN component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Receivables...
CVE-2011-2250
Unspecified vulnerability in the PeopleSoft Enterprise FIN component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Receivables...
2^6 TCP Control Bit - Fuzzer (No ECN or CWR)
!/usr/bin/perl 2^6 TCP Control Bit Fuzzer No ECN or CWR This code was written originally as a control bit fuzzer for the JunOS 3-9 crash mentioned in PSN-2010-01-623 and http://www.securityfocus.com/news/11571 However it will also be useful in fuzzing future IP stacks, such as userland IP stacks ...
CVE-2009-1926
Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service TCP outage via a series of TCP sessions that have pending data and a 1 small or 2 zero receive window size, and remain in the...
3Com Shark Fin Comcast-supplied Default Password (deprecated)
Binary data 4824.prm...
CVE-2007-3537
IBM OS/400 aka i5/OS V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules...
Information disclosure
IBM OS/400 aka i5/OS V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules...
CVE-2007-3537
IBM OS/400 aka i5/OS V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules...
CVE-2007-3537
CVE-2007-3537 affects IBM OS/400 (i5/OS) on iSeries, specifically V4R2M0 through V5R3M0. The vulnerability arises because the system sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules.
CVE-2004-2252
The CVE-2004-2252 vulnerability affects Astaro Security Linux firewall prior to 4.024. The issue arises because the firewall sends responses to SYN-FIN packets, enabling remote attackers to glean system information and craft targeted attacks. Affected products: Astaro Security Linux versions befo...
CVE-2002-1778
CVE-2002-1778 affects Symantec Norton Personal Firewall 2002. The vulnerability allows remote attackers to bypass the portscan protection by using crafted scans: SYN/FIN, SYN/FIN/URG, SYN/FIN/PUSH, or SYN/FIN/URG/PUSH. The connected records reiterate this bypass but do not provide the exact root ...
CVE-2002-1712
Microsoft Windows 2000 allows remote attackers to cause a denial of service memory consumption by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port TCP/139, as demonstrated by stream3...
snort protection bypass
Packest with SYN,FIN,ECN bits set are not detected...
CVE-2002-1778
Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a 1 SYN/FIN, 2 SYN/FIN/URG, 3 SYN/FIN/PUSH, or 4 SYN/FIN/URG/PUSH scan...
Zyxel Prestige DoS
Problems with fragmented packets processing, Syn+fin and Syn+ack packets...
Norton Personal Firewall 2002 vulnerable to SYN/FIN scan
Hi all, I looked briefly in bugtraq archives and I didn't find any reference to this issue. Please accept my apologies, if it's a known problem. Norton Personal Firewall 2002 on Windows 2000 is vulnerable to SYN/FIN scan SYN/FIN/URG, SYN/FIN/PUSH, SYN/FIN/URG/PUSH are not detected as well also if...
Tru64 - Malformed TCP Packet Denial of Service
Tru64 - Malformed TCP Packet Denial of Service source: https://www.securityfocus.com/bid/4011/info It has been reported that Tru64 systems may be prone to a denial of service condition when handling malformed TCP packets. Specifically, when processing a malformed TCP packet with both the SYN and...
Tru64 - Malformed TCP Packet Denial of Service
source: https://www.securityfocus.com/bid/4011/info It has been reported that Tru64 systems may be prone to a denial of service condition when handling malformed TCP packets. Specifically, when processing a malformed TCP packet with both the SYN and FIN flags set, vulnerable Tru64 systems may blo...