882 matches found
Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (1)
// source: https://www.securityfocus.com/bid/11258/info Multiple vendor implementations of the TCP stack are reported prone to a remote denial-of-service vulnerability. The issue is reported to present itself due to inefficiencies present when handling fragmented TCP packets. The discoverer of th...
Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (4)
// source: https://www.securityfocus.com/bid/11258/info Multiple vendor implementations of the TCP stack are reported prone to a remote denial-of-service vulnerability. The issue is reported to present itself due to inefficiencies present when handling fragmented TCP packets. The discoverer of th...
CVE-2003-0033
Removed by vendor...
CVE-2004-0724
The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service server or client crash via an empty fragmented packet...
CVE-2004-0724
The CVE-2004-0724 entry concerns the Half-Life engine (pre-July 7, 2004). The vulnerability allows remote attackers to cause a denial of service (server or client crash) by sending an empty fragmented packet over the network. The NVD entry quotes a CVSSv2 base score of 5.0 (Medium) with network a...
Microsoft Windows 98 - Fragmented UDP Flood Denial of Service
// source: https://www.securityfocus.com/bid/8543/info A remote denial of service vulnerability has been reported to affect Microsoft Windows 98. It is reportedly possible to reproduce this condition by sending a fragmented flood of spoofed UDP packets to a vulnerable system. This will reportedly...
CVE-2003-0033
Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets...
3Com SuperStack 3 Firewall - Content Filter Bypassing
source: https://www.securityfocus.com/bid/7021/info A vulnerability has been reported in the 3Com Superstack 3 Firewall. HTTP content filters put in place by the device fail to assemble fragmented data, potentially allowing an attacker to access unauthorized web sites. An attacker could exploit...
CVE-2002-1779
The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 NPW does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 CVE-2000-0305...
CVE-2002-1121
SMTP content filter engines, including 1 GFI MailSecurity for Exchange/SMTP before 7.2, 2 InterScan VirusWall before 3.52 build 1494, 3 the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 "Message Fragmentation an...
CVE-2002-1121
CVE-2002-1121 describes a vulnerability where SMTP content filters fail to detect fragmented emails (RFC 2046 message/partial), allowing bypass of virus scanning. Affected products include GFI MailSecurity for Exchange/SMTP (pre-7.2), InterScan VirusWall (pre-3.52 build 1494), and the default MIM...
SurfControl SuperScout does not filter web requests fragmented in multiple packets
Overview SurfControl SuperScout Web Filter does not block some HTTP requests that have been fragmented into multiple packets. Description SurfControl SuperScout Web Filter is software intended for companies that wish to limit employees' web surfing to appropriate uses. SuperScout anazlyzes...
DoS against Windows and other systems
A number of fragmented packet cause host to freeze during the attack...
CVE-2002-0046
Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet...
Zyxel Prestige DoS
Problems with fragmented packets processing, Syn+fin and Syn+ack packets...
CVE-2001-1194
Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with 1 an IP length less than actual packet size, or 2 fragmented packets whose size exceeds 64 kilobytes after reassembly...
CVE-2001-0518
The vulnerability CVE-2001-0518 affects the Oracle Net Listener prior to Oracle 9i. A fragmentation-based denial-of-service can occur when an attacker sends the first portion of a fragmented Oracle command without the remainder, causing the listener to hang. The issue is described as a fragmentat...
CVE-2001-0518
Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending the remainder of the command, which causes the listener to hang...