CVE-2004-0949

The smbrecvtrans2 function call in the samba filesystem smbfs in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to 1 read arbitrary kernel information or 2 raise a counter value to an arbitrary number by...

CVE-2004-0949

The smbrecvtrans2 function call in the samba filesystem smbfs in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to 1 read arbitrary kernel information or 2 raise a counter value to an arbitrary number by...

security flaw

The smbrecvtrans2 function call in the samba filesystem smbfs in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to 1 read arbitrary kernel information or 2 raise a counter value to an arbitrary number by...

CVE-2004-0949

The smbrecvtrans2 function call in the samba filesystem smbfs in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to 1 read arbitrary kernel information or 2 raise a counter value to an arbitrary number by...

CVE-2004-0949

CVE-2004-0949 affects the Samba filesystem smbfs in Linux kernel 2.4/2.6, where smb_recv_trans2 fails to reassemble fragmented packets, allowing a remote attacker via the network to read arbitrary kernel information or to inflate a counter by replaying the first fragment. Public advisories (RHSA,...

Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (4)

// source: https://www.securityfocus.com/bid/11258/info Multiple vendor implementations of the TCP stack are reported prone to a remote denial-of-service vulnerability. The issue is reported to present itself due to inefficiencies present when handling fragmented TCP packets. The discoverer of th...

Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (1)

// source: https://www.securityfocus.com/bid/11258/info Multiple vendor implementations of the TCP stack are reported prone to a remote denial-of-service vulnerability. The issue is reported to present itself due to inefficiencies present when handling fragmented TCP packets. The discoverer of th...

CVE-2003-0033

Removed by vendor...

CVE-2004-0724

The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service server or client crash via an empty fragmented packet...

CVE-2004-0724

The CVE-2004-0724 entry concerns the Half-Life engine (pre-July 7, 2004). The vulnerability allows remote attackers to cause a denial of service (server or client crash) by sending an empty fragmented packet over the network. The NVD entry quotes a CVSSv2 base score of 5.0 (Medium) with network a...

Microsoft Windows 98 - Fragmented UDP Flood Denial of Service

// source: https://www.securityfocus.com/bid/8543/info A remote denial of service vulnerability has been reported to affect Microsoft Windows 98. It is reportedly possible to reproduce this condition by sending a fragmented flood of spoofed UDP packets to a vulnerable system. This will reportedly...

CVE-2003-0033

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets...

3Com SuperStack 3 Firewall - Content Filter Bypassing

source: https://www.securityfocus.com/bid/7021/info A vulnerability has been reported in the 3Com Superstack 3 Firewall. HTTP content filters put in place by the device fail to assemble fragmented data, potentially allowing an attacker to access unauthorized web sites. An attacker could exploit...

CVE-2002-1779

The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 NPW does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 CVE-2000-0305...

CVE-2002-1121

CVE-2002-1121 describes a vulnerability where SMTP content filters fail to detect fragmented emails (RFC 2046 message/partial), allowing bypass of virus scanning. Affected products include GFI MailSecurity for Exchange/SMTP (pre-7.2), InterScan VirusWall (pre-3.52 build 1494), and the default MIM...

CVE-2002-1121

SMTP content filter engines, including 1 GFI MailSecurity for Exchange/SMTP before 7.2, 2 InterScan VirusWall before 3.52 build 1494, 3 the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 "Message Fragmentation an...

SurfControl SuperScout does not filter web requests fragmented in multiple packets

Overview SurfControl SuperScout Web Filter does not block some HTTP requests that have been fragmented into multiple packets. Description SurfControl SuperScout Web Filter is software intended for companies that wish to limit employees' web surfing to appropriate uses. SuperScout anazlyzes...

DoS against Windows and other systems

A number of fragmented packet cause host to freeze during the attack...

CVE-2002-0046

Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet...

Zyxel Prestige DoS

Problems with fragmented packets processing, Syn+fin and Syn+ack packets...