CVE-2001-0710

NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machine, exhausting the mbuf pool...

CVE-1999-1018: Undefined Security Weakness

IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets...

CVE-2001-0270

CVE-2001-0270 affects Marconi ASX-1000 ASX switches. The issue allows remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed TCP packet that uses SYN-FIN and the More Fragments attributes. Exploitation details or active exploit status are not pro...

Дырка в HTR-файлах IIS

С помощью некорректного запроса к HTR-файлу можно подвесить обрарбатывающий его ISAPI фильтр. Кроме того, через HTR ISAPI ISM.DLL можно получить фрагменты некоторых файлов...

CVE-2000-0692

ISS RealSecure 3.2.1 and 3.2.2 are affected by a denial-of-service vulnerability where a remote attacker can trigger a flood of fragmented packets with the SYN flag set. The underlying issue is a handling flaw in processing fragmented traffic, leading to partial availability impact. Reported by N...

Axent NetProwler 3.0 - IP Packets Denial of Service (1)

// source: https://www.securityfocus.com/bid/1225/info Axent NetProwler 3.0 IDS is vulnerable to a malformed packet attack. It will crash if the Man-in-the-Middle signature encounters a packet for which the following expression is true: IPHEADERLENGTH + TCPHEADERLENGTH IPTOTALLENGTH According to...

Linux 2.1.89 - 2.2.3 IP Fragmenting Functionality 0 Length Fragment Handling Remote DoS

The remote host appears to be using a Linux kernel that contains a flaw in its IP fragment handling code. By sending a series of packets with 0 length fragments, an unauthenticated attacker may be able to disable the remote host's IP connectivity. C Tenable Network Security, Inc...

Linux Kernel 2.0.33 - IP Fragment Overlap

Linux Kernel 2.0.33 - IP Fragment Overlap / source: https://www.securityfocus.com/bid/376/info Linux kernel 2.0.33 is vulnerable to a denial of service attack related to overlapping IP fragments. The bug is not in the handling of them itself, but the action taken when an oversized packet is...

Linux Kernel 2.0.33 - IP Fragment Overlap

/ source: https://www.securityfocus.com/bid/376/info Linux kernel 2.0.33 is vulnerable to a denial of service attack related to overlapping IP fragments. The bug is not in the handling of them itself, but the action taken when an oversized packet is recieved. A printk function is called containin...