Cisco防火墙服务模块ICMP消息拒绝服务漏洞

CVECAN ID: CVE-2009-0638 Cisco FWSM是Cisco设备上的防火墙服务模块。 Cisco FWSM软件中存在漏洞，如果处理了多个特制的ICMP消息，就会导致FWSM停止转发接口之间的通讯，或停止处理到达FWSM的通讯（管理通讯）。这是由于FWSM用于处理通讯的一个网络处理器（NP）在处理特定类型的ICMP消息时可能耗尽所有可用的执行线程，这种行为限制了可用于处理更多通讯的执行线程。 任何中间通讯或到达FWSM的通讯都受影响，无论是否启用了ICMP检查。 Cisco Firewall Services Module 4.x Cisco Firewall...

CVE-2009-0638

CVE-2009-0638 affects Cisco FWSM (Firewall Services Module) on Catalyst 6500 and 7600 platforms. The vulnerability arises when the device processes multiple crafted ICMP messages, causing a denial-of-service by stopping traffic forwarding or failing to process management/transit traffic. Affected...

CVE-2009-0638

The Cisco Firewall Services Module FWSM 2.x, 3.1 before 3.116, 3.2 before 3.213, and 4.0 before 4.06 for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service traffic-handling outage via a series of malformed ICMP messages...

Firewall Services Module Crafted ICMP Message Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Firewall Services Module DoS

Crash on malcrafted ICMP packets...

Cisco Security Advisory: Firewall Services Module Crafted ICMP Message Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Firewall Services Module Crafted ICMP Message Vulnerability Advisory ID: cisco-sa-20090819-fwsm http://www.cisco.com/warp/public/707/cisco-sa-20090819-fwsm.shtml Revision 1.0 For Public Release 2009 August 19 1600 UTC GMT...

*nux how to create a backdoor-a vulnerability warning-the black bar safety net

Painstakingly（or ease of obtaining root after, Of course, want to long-term holding. To be later used to it. d0ing what u want t0 d0 : the traditional method is to build a back doorbackd00r. Even if the invasion is found, the better（advanced）back door still be able to make you again a relaxing...

Design/Logic Flaw

The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service device reset via a crafted ICMP echo request, which triggers an assertion error related to a "logic issue."...

CVE-2009-1683

The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service device reset via a crafted ICMP echo request, which triggers an assertion error related to a "logic issue."...

PT-2009-4167 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.2.1 iPhone OS for iPod touch versions 1.1 through 2.2.1 Description: The issue allows remote attackers to cause a denial of service, resulting in a device reset, via a crafted ICMP echo request. This is...

Operating System (OS) Detection (ICMP)

ICMP based OS fingerprinting / detection. SPDX-FileCopyrightText: 2009 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later include"pluginfeedinfo.inc"; ifdescription...

kernel: rt_cache leak leads to lack of network connectivity

The icmpsend function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache aka DST in some situations involving transmission of an ICMP Host Unreachable message, which allows remo...

Input validation

Multiple unspecified vulnerabilities in the home agent HA implementation in the 1 Mobile IP NAT Traversal feature and 2 Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service input queue wedge and interface outage via an ICMP packet, aka Bug ID...

CVE-2009-0634

Cisco IOS Software CVE-2009-0634 involves DoS in Mobile IP NAT Traversal and Mobile IPv6. Affected releases: 12.3–12.4. Exploitation requires ICMP directed at the router, wedging input queues and causing interface outages, per Bug IDs CSCso05337/CSCsm97220. Impact: denial of service with interfac...

Design/Logic Flaw

The icmpsend function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache aka DST in some situations involving transmission of an ICMP Host Unreachable message, which allows remo...

CVE-2009-0778

CVE-2009-0778 affects the Linux kernel prior to 2.6.25 when configured as a router with a REJECT route. The icmp_send code in net/ipv4/icmp.c can mishandle the Protocol Independent Destination (DST) cache, potentially leaking DST state and allowing remote attackers to cause a denial of service (c...

CVE-2009-0778

The icmpsend function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache aka DST in some situations involving transmission of an ICMP Host Unreachable message, which allows remo...

Checkpoint VPN-1 PAT信息泄露漏洞

CVECAN ID: CVE-2008-5849 CheckPoint防火墙/VPN解决方案可为组织提供网络架构和信息安全保护。 对于启用了端口地址翻译（PAT）的CheckPoint VPN-1防火墙，如果远程攻击者向防火墙的18264/tcp端口发送设置有很低TTL值的报文的话，就可以触发ICMPTIMXCEEDINTRANS响应，而响应的封装IP报文中包含有内部IP地址，如下所示： 14:56:25.169480 IP tos 0xe0, ttl 255, id 21407, offset 0, flags none, proto: ICMP 1, length: 68...

CVE-2008-5849

Check Point VPN-1 R55, R65, and other versions, when Port Address Translation PAT is used, allows remote attackers to discover intranet IP addresses via a packet with a small TTL, which triggers an ICMPTIMXCEEDINTRANS aka ICMP time exceeded in-transit response containing an encapsulated IP packet...

CVE-2008-5849

CVE-2008-5849 affects Check Point VPN-1 with Port Address Translation (PAT) enabled (notably Check Point VPN-1 R55 and R65). The issue is information disclosure: an attacker can remotely send a crafted packet to the firewall management port (18264/tcp) and trigger an ICMP TIMXCEED_INTRANS respons...