RFP2K05: NetProwler vs. RFProwler

---/ RFP2K05 /----------------------------/ rfp.labs / wiretrip /--------- NetProwler vs. RFProwler Remote denial of service in Axent NetProwler ------------------------------------/ rain forest puppy / [email protected] Table of contents: -/ 1 / For the Black Hats -/ 2 / For the White Hats -/ 3 /...

RFP2K05.txt

---------- Forwarded message ---------- Date: Thu, 18 May 2000 22:31:58 -0500 CDT From: rain forest puppy To: [email protected] Subject: RFP2K05: NetProwler vs. RFProwler ---/ RFP2K05 /----------------------------/ rfp.labs / wiretrip /--------- NetProwler vs. RFProwler Remote denial of...

CVE-2000-0463

BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets...

CVE-1999-0602

Technical specifics (affected products/versions, root cause, exploitability and fixes) are not provided in the supplied documents. Monitor Red Hat, NVD and related feeds for updates and confirmed details.

CVE-1999-0588

A filter in a router or firewall allows unusual fragmented packets...

CVE-1999-0240

Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy...

MS_security_bulletin.txt

Subject: Microsoft Security Bulletin MS99-034 To: [email protected] The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. Microsoft Security Bulletin MS99-034...

CVE-1999-1086

Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol NCP calls...

CVE-1999-0240

Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy...

CVE-1999-0602

A network intrusion detection system IDS does not properly reassemble fragmented packets...

CVE-1999-0588

A filter in a router or firewall allows unusual fragmented packets...

PT-1999-1019 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue is related to how Windows NT TCP/IP processes fragmented IP packets, which can cause a denial of service. Recommendations: At the moment, there is no information about a newer...

PT-1999-1022 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns some filters or firewalls that permit fragmented SYN packets with IP reserved bits, contrary to their intended policy. Recommendations: At the moment, there is no...

PT-1999-1220 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS does not properly reassemble fragmented packets. This issue may lead to potential security risks, but specific details about affected device...

PT-1999-1208 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: A filter in a router or firewall allows unusual fragmented packets. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

HP HP-UX 10.34 Microsoft Windows 95NT 3.5.1 SP1NT 3.5.1 SP2NT 3.5.1 SP3NT 3.5.1 SP4NT 4.0NT 4.0 SP1NT 4.0 SP2NT 4.0 SP3 - Denial of Service

HP HP-UX 10.34 Microsoft Windows 95NT 3.5.1 SP1NT 3.5.1 SP2NT 3.5.1 SP3NT 3.5.1 SP4NT 4.0NT 4.0 SP1NT 4.0 SP2NT 4.0 SP3 - Denial of Service // source: https://www.securityfocus.com/bid/124/info The Teardrop denial of service attack exploits a flaw inherent to multiple vendor TCP/IP stacks. This...

HP HP-UX 10.34 / Microsoft Windows 95/NT 3.5.1 SP1/NT 3.5.1 SP2/NT 3.5.1 SP3/NT 3.5.1 SP4/NT 4.0/NT 4.0 SP1/NT 4.0 SP2/NT 4.0 SP3 - Denial of Service

// source: https://www.securityfocus.com/bid/124/info The Teardrop denial of service attack exploits a flaw inherent to multiple vendor TCP/IP stacks. This problem is related to how the TCP/IP stack handle reassembly of fragmented IP packets. This attack can be delivered by sending 2 or more...

Intel Corporation Express 8100 ISDN Router - Fragmented ICMP

source: https://www.securityfocus.com/bid/1228/info The Intel Express 8100 and possibly 8200 ISDN routers can be remotely crashed by sending fragmented or oversized ICMP packets. Using libnet and isic-0.05: icmpsic -s 127.0.0.1,23 -d -F 100...

Intel Corporation Express 8100 ISDN Router - Fragmented ICMP

Intel Corporation Express 8100 ISDN Router - Fragmented ICMP source: https://www.securityfocus.com/bid/1228/info The Intel Express 8100 and possibly 8200 ISDN routers can be remotely crashed by sending fragmented or oversized ICMP packets. Using libnet and isic-0.05: icmpsic -s 127.0.0.1,23 -d -F...