CVE-2005-0210

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...

CVE-2005-0209

Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service kernel crash via crafted IP packet fragments...

CVE-2005-0209

Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service kernel crash via crafted IP packet fragments...

security flaw

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...

CVE-2005-0210

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...

Debian DSA-297-1 : snort - integer overflow, buffer overflow

Two vulnerabilities have been discovered in Snort, a popular network intrusion detection system. Snort comes with modules and plugins that perform a variety of functions such as protocol analysis. The following issues have been identified : Heap overflow in Snort 'stream4' preprocessor VU139129,...

ROSE Attack (variation 2)

Exploit for unknown platform in category dos / poc ========================= ROSE Attack variation 2 ========================= / ROSE attack variation 2 chuck at lemure.net Discovered by: gandalf at digital.net code modified from large IGMP attack by: Kox by Coolio coolio at k-r4d.com Sends out...

ROSE Attack - NewDawn3

Exploit for unknown platform in category dos / poc ====================== ROSE Attack - NewDawn3 ====================== /-------------------------------------------------------------/ / Implementation of Rose Attack described by Gandalf gandalf at digital.net Reference: Bugtraq, 30 mars 2004, "IP...

ZyXel Prestige information leak

Memory fragments are leaked in ARP packets...

CVE-2002-1140

The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service service hang via malformed packet fragments, aka "Improper parameter size check leading to denial of service."...

CVE-2004-0744

CVE-2004-0744 is referenced in HP-UX advisories as a remote Denial of Service vulnerability in TCP/IP (Rose/fragment attack). The HP-UX impact concerns B.11.00, B.11.04, B.11.11, and B.11.23 running TCP/IP, with patchesPHNE_30161, PHNE_33427, PHKL_31500 (and related updates) required to mitigate....

CVE-2001-1137

The CVE-2001-1137 entry relates to D-Link DI-704 Internet Gateway firmware versions earlier than V2.56b6. It describes a denial-of-service condition where remote attackers can cause a reboot by sending malformed IP datagram fragments. The impact is a partial availability loss for the device. No r...

CVE-2001-0863

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL Turbo ACL for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments...

CVE-2001-0867

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are affected by CVE-2001-0867. The vulnerability is that packet fragment filtering is not applied by ACLs when the fragment keyword is used, allowing remote attackers to bypass intended access controls (network-based, no authent...

CVE-2001-0710

CVE-2001-0710 affects NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier. A remote attacker can trigger a denial-of-service by sending a large number of IP fragments, which exhausts the system’s mbuf pool. The underlying issue is in the IP fragmentation handling that allows fragmentation flood to...

CVE-2001-0867

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls...

CVE-2001-0710

NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machine, exhausting the mbuf pool...

CVE-2001-0270

CVE-2001-0270 affects Marconi ASX-1000 ASX switches. The issue allows remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed TCP packet that uses SYN-FIN and the More Fragments attributes. Exploitation details or active exploit status are not pro...

Дырка в HTR-файлах IIS

С помощью некорректного запроса к HTR-файлу можно подвесить обрарбатывающий его ISAPI фильтр. Кроме того, через HTR ISAPI ISM.DLL можно получить фрагменты некоторых файлов...

CVE-2000-0692

ISS RealSecure 3.2.1 and 3.2.2 are affected by a denial-of-service vulnerability where a remote attacker can trigger a flood of fragmented packets with the SYN flag set. The underlying issue is a handling flaw in processing fragmented traffic, leading to partial availability impact. Reported by N...