Multiple IOS IPS Vulnerabilities

The Intrusion Prevention System IPS feature set of Cisco IOS® contains several vulnerabilities. These include: Fragmented IP packets may be used to evade signature inspection. IPS signatures utilizing the regular expression feature of the ATOMIC.TCP signature engine may cause a router to crash...

CVE-2007-0459

packet-tcp.c in the TCP dissector in Wireshark formerly Ethereal 0.99.2 through 0.99.4 allows remote attackers to cause a denial of service application crash or hang via fragmented HTTP packets...

DEBIAN-CVE-2007-0459

packet-tcp.c in the TCP dissector in Wireshark formerly Ethereal 0.99.2 through 0.99.4 allows remote attackers to cause a denial of service application crash or hang via fragmented HTTP packets...

Linux kernel IPv6 filtering bypass

It's possible to bypass filtering by using fragmented packets...

Cisco Intrusion Prevention System Management Interface Denial of Service and Fragmented Packet Evasion Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Intrusion Prevention System DoS and protection bypass

Malformed SSLv2 handshake DoS, fragmented packets filtering evasion...

Cisco Security Advisory: Cisco Intrusion Prevention System Management Interface Denial of Service and Fragmented Packet Evasion Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Intrusion Prevention System Management Interface Denial of Service and Fragmented Packet Evasion Vulnerabilities Document ID: 71558 Advisory ID: cisco-sa-20060920-ips...

Cisco IPS fails to properly check fragmented IP packets

Overview Cisco IPS systems may fail to check specially-crafted IP packets that are fragmented. Description Some Cisco intrusion prevention system IPS products can be configured as passive intrusion detection systems IDS or active IPS systems. Cisco refers to the IPS mode as "inline" and the IDS...

security flaw

Linux SCTP lksctp before 2.6.17 allows remote attackers to cause a denial of service kernel panic via incoming IP fragmented 1 COOKIEECHO and 2 HEARTBEAT SCTP control chunks...

CVE-2006-0048

Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service segmentation fault via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread...

CVE-2006-0048

Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service segmentation fault via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread...

DEBIAN-CVE-2006-0048

Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service segmentation fault via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread...

CVE-2006-0048

Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service segmentation fault via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread...

CVE-2006-0048

Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service segmentation fault via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread...

CVE-2006-0048

Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service segmentation fault via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread...

Design/Logic Flaw

The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths...

CVE-2006-0839

The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths...

CVE-2006-0839

The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths...

CVE-2005-4723

D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service device reboot via a series of crafted fragmented UDP packets, possibly involving a missing fragment...

D-Link Wireless Access Point (Fragmented UDP) DoS Exploit

No description provided by source. / Aaron Portnoy silc.thunkers.net, thunkers D-Link Wireless Access Point Fragmented UDP DoS Proof of Concept gcc -o dlinkdos dlinkdos.c -lnet -Wall / include libnet.h define DEVICE "eth0" define SRCIP "127.0.0.1" define DSTIP "127.0.0.1" define SRCPRT 200 define...