DEBIAN-CVE-2010-0751

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

CVE-2010-0751

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

CVE-2010-0751

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

CVE-2010-0751

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

CVE-2010-0751

The CVE-2010-0751 issue affects libnids ip_evictor in ip_fragment.c before version 1.24, used by dsniff and possibly other products. A remote attacker can trigger a denial of service via crafted fragmented packets, causing a NULL pointer dereference and crash. Public advisories (SUSE, Fedora, SUS...

CVE-2010-0751

The ipevictor function in ipfragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service NULL pointer dereference and crash via crafted fragmented packets...

Wireshark LWRES Dissector getaddrsbyname_request Buffer Overflow (loop)

The LWRES dissector in Wireshark version 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allows remote attackers to execute arbitrary code due to a stack-based buffer overflow. This bug found and reported by babi. This particular exploit targets the dissectgetaddrsbynamerequest function. Several...

Wireshark LWRES Dissector getaddrsbyname_request Buffer Overflow

$Id: wiresharklwresgetaddrbyname.rb 8367 2010-02-04 04:56:18Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2008-7161

Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058...

Hardcoded credentials

Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058...

Ubuntu: Security Advisory (USN-785-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-785-1: ipsec-tools vulnerabilities

It was discovered that ipsec-tools did not properly handle certain fragmented packets. A remote attacker could send specially crafted packets to the server and cause a denial of service. CVE-2009-1574 It was discovered that ipsec-tools did not properly handle memory usage when verifying certifica...

[ MDVSA-2009:112 ] ipsec-tools

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:112 http://www.mandriva.com/security/ Package : ipsec-tools Date : May 13, 2009 Affected: 2008.1, 2009.0, 2009.1, Corporate 4.0 Problem Description: racoon/isakmpfrag.c in ipsec-tools before 0.7.2 allows...

CVE-2009-1574

racoon/isakmpfrag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service crash via crafted fragmented packets without a payload, which triggers a NULL pointer dereference...

Null pointer dereference

racoon/isakmpfrag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service crash via crafted fragmented packets without a payload, which triggers a NULL pointer dereference...

Cisco ASA/PIX Appliances Fail to Properly Check Fragmented TCP Packets

No description provided by source. The vulnerability affects the following Cisco ASA/PIX versions: Release Fixed in: -------- --------- 6.3 Not affected 7.0 7.08.6 7.1 7.12.81 7.2 7.24.30 8.0 8.04.28 8.1 8.12.19 8.2 8.20.230 ----------------------------- Triggering the vuln...

Cisco ASAPIX - Appliances Fail to Properly Check Fragmented TCP Packets

Cisco ASAPIX - Appliances Fail to Properly Check Fragmented TCP Packets The vulnerability affects the following Cisco ASA/PIX versions: Release Fixed in: -------- --------- 6.3 Not affected 7.0 7.08.6 7.1 7.12.81 7.2 7.24.30 8.0 8.04.28 8.1 8.12.19 8.2 8.20.230 -----------------------------...

Cisco ASA/PIX - Appliances Fail to Properly Check Fragmented TCP Packets

The vulnerability affects the following Cisco ASA/PIX versions: Release Fixed in: -------- --------- 6.3 Not affected 7.0 7.08.6 7.1 7.12.81 7.2 7.24.30 8.0 8.04.28 8.1 8.12.19 8.2 8.20.230 ----------------------------- Triggering the vuln ------------------------------ /Utilize 1550 blocks on an...

IPSec ESP kernel panics

The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service crash via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV...

Security Best Practice: Familiarize Yourself with the Packet Sanity Protection

The Packet Sanity protection performs several Layer 3 and Layer 4 sanity checks. These include verifying packet size, UDP and TCP header lengths, dropping IP options and verifying the TCP flags.Numerous types of attacks may be hidden in fragmented packets...