CVE-2011-2059

The ipv6 component in Cisco IOS before 15.14M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop HBH extension header EH with a 0x0c01050...

Design/Logic Flaw

The ipv6 component in Cisco IOS before 15.14M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop HBH extension header EH with a 0x0c01050...

CVE-2011-2059

The CVE-2011-2059 issue affects Cisco IOS IPv6: the IPv6 component is vulnerable to fingerprinting/information disclosure via an ICMPv6 Echo Request containing a Hop-by-Hop extension header with PadN data 0x0c01050c. Affected: Cisco IOS prior to 15.1(4)M1.3. Impact described as potential exposure...

CVE-2011-2059

The ipv6 component in Cisco IOS before 15.14M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop HBH extension header EH with a 0x0c01050...

CVE-2011-3282

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155...

Code injection

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155...

CVE-2011-3282

Summary: CVE-2011-3282 is a Cisco IOS/IOS XE vulnerability where MPLS + IPv6 traffic can cause a device to reload via crafted ICMPv6/IPv6 packets. Affected: Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, 15.1; Cisco IOS XE 2.1.x through 3.3.x, with MPLS configured. Impact: remote denial of service ...

CVE-2011-3282

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155...

Wireshark 1.4.9 & Wireshark 1.6.2 updated version released

Wireshark 1.4.9 & Wireshark 1.6.2 updated version released Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education. The following bugs have been fixed: configure ignores partially LDFLAGS. Bug 5607 Build fails when it...

targets-ipv6-multicast-invalid-dst NSE Script

Sends an ICMPv6 packet with an invalid extension header to the all-nodes link-local multicast address ff02::1 to discover some available hosts on the LAN. This works because some hosts will respond to this probe with an ICMPv6 Parameter Problem packet. Script Arguments newtargets If true, add...

targets-ipv6-multicast-echo NSE Script

Sends an ICMPv6 echo request packet to the all-nodes link-local multicast address ff02::1 to discover responsive hosts on a LAN without needing to individually ping each IPv6 address. Script Arguments newtargets If true, add discovered targets to the scan queue...

Bypassing Cisco's ICMPv6 Router Advertisement Guard feature

To bypass the Router Advertisement Guarding feature in the very few Cisco switches and images that support it: Attack: ======= Make the evil Router Advertisement fragmented and put the ICMPv6 into the second fragment, eg. by putting a very large Destination extension header before the ICMPv6 part...

Cisco routers Router Advertisement Guarding protection bypass

It's possible to bypass protection with fragmented ICMPv6 packet...

ICMPv6 Router Announcement flooding denial of service affecting multiple systems

This security advisory is released because Microsoft doesnt want to fix the issue. Cisco did for its IOS and ASA within 3 months. Title: ICMPv6 Router Announcement flooding denial of service affecting multiple systems Date: 05 April 2011 URL:...

Multiple systems ICMPv6 flood DoS

router announcement packets flood resourceds exhaustion...

IPv6 Link Local/Node Local Ping Discovery

Send a ICMPv6 ping request to all default multicast addresses, and wait to see who responds. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IPv6 Link Local/Node Local Ping Discovery',...

CVE-2009-2189

The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of 1 Router Advertisement and 2 Neighbor Discovery packets, which allows remote attackers to cause a denial of service resource...

Design/Logic Flaw

The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of 1 Router Advertisement and 2 Neighbor Discovery packets, which allows remote attackers to cause a denial of service resource...

CVE-2009-2189

The CVE-2009-2189 affects Apple Time Capsule , AirPort Extreme Base Station , and AirPort Express Base Station with firmware before 7.5.2. The ICMPv6 implementation does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, enabling a remote attacker on the same netwo...

Microsoft Windows TCP/IP Could Allow Remote Code Execution (974145)

This host is missing a critical security update according to Microsoft Bulletin MS10-009. OpenVAS Vulnerability Test $Id: gbms10-009.nasl 5364 2017-02-20 13:26:07Z cfi $ Microsoft Windows TCP/IP Could Allow Remote Code Execution 974145 Authors: Madhuri D Copyright: Copyright c 2010 Greenbone...