DCE-RPC Fragmented Requests (CVE-2010-0102)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

Multiple IOS IPS Vulnerabilities

The Intrusion Prevention System IPS feature set of Cisco IOS contains several vulnerabilities. These include: - Fragmented IP packets may be used to evade signature inspection. CVE-2007-0917 - IPS signatures utilizing the regular expression feature of the ATOMIC.TCP signature engine may cause a...

CVE-2010-0751

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

DEBIAN-CVE-2010-0751

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

Null pointer dereference

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

CVE-2010-0751

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

CVE-2010-0751

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

CVE-2010-0751

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

CVE-2010-0751

The CVE-2010-0751 issue affects libnids ip_evictor in ip_fragment.c before version 1.24, used by dsniff and possibly other products. A remote attacker can trigger a denial of service via crafted fragmented packets, causing a NULL pointer dereference and crash. Public advisories (SUSE, Fedora, SUS...

Wireshark LWRES Dissector getaddrsbyname_request Buffer Overflow (loop)

The LWRES dissector in Wireshark version 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allows remote attackers to execute arbitrary code due to a stack-based buffer overflow. This bug found and reported by babi. This particular exploit targets the dissectgetaddrsbynamerequest function. Several...

Wireshark LWRES Dissector getaddrsbyname_request Buffer Overflow

$Id: wiresharklwresgetaddrbyname.rb 8367 2010-02-04 04:56:18Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2008-7161

Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058...

Hardcoded credentials

Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058...

Ubuntu: Security Advisory (USN-785-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-785-1: ipsec-tools vulnerabilities

It was discovered that ipsec-tools did not properly handle certain fragmented packets. A remote attacker could send specially crafted packets to the server and cause a denial of service. CVE-2009-1574 It was discovered that ipsec-tools did not properly handle memory usage when verifying certifica...

[ MDVSA-2009:112 ] ipsec-tools

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:112 http://www.mandriva.com/security/ Package : ipsec-tools Date : May 13, 2009 Affected: 2008.1, 2009.0, 2009.1, Corporate 4.0 Problem Description: racoon/isakmpfrag.c in ipsec-tools before 0.7.2 allows...

CVE-2009-1574

racoon/isakmpfrag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service crash via crafted fragmented packets without a payload, which triggers a NULL pointer dereference...

Null pointer dereference

racoon/isakmpfrag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service crash via crafted fragmented packets without a payload, which triggers a NULL pointer dereference...

Cisco ASA/PIX Appliances Fail to Properly Check Fragmented TCP Packets

No description provided by source. The vulnerability affects the following Cisco ASA/PIX versions: Release Fixed in: -------- --------- 6.3 Not affected 7.0 7.08.6 7.1 7.12.81 7.2 7.24.30 8.0 8.04.28 8.1 8.12.19 8.2 8.20.230 ----------------------------- Triggering the vuln...

Cisco ASAPIX - Appliances Fail to Properly Check Fragmented TCP Packets

Cisco ASAPIX - Appliances Fail to Properly Check Fragmented TCP Packets The vulnerability affects the following Cisco ASA/PIX versions: Release Fixed in: -------- --------- 6.3 Not affected 7.0 7.08.6 7.1 7.12.81 7.2 7.24.30 8.0 8.04.28 8.1 8.12.19 8.2 8.20.230 -----------------------------...