PT-2006-2646 · Microsoft · Isa Server 2004 +1

Name of the Vulnerable Software and Affected Versions: Microsoft ISA Server 2004 Description: The issue allows remote attackers to bypass certain filtering rules, including ones for ICMP and TCP, via IPv6 packets. However, an established researcher has disputed this, stating that neither Microsof...

FreeBSD-SA-06:07.pf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:07.pf Security Advisory The FreeBSD Project Topic: IP fragment handling panic in pf4 Category: contrib Module: syscontrib Announced: 2006-01-25 Credits: Jakob...

Record route

This plugin sends packets with the 'Record Route' option. It is a complement to traceroute. OpenVAS Vulnerability Test $Id: recordroute.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Record route Authors: Michel Arboi Copyright: Copyright C 2004 Michel Arboi This program is free software; y...

CVE-2005-1979

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service MSDTC service exception and exit via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol TIP functionality...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials. SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the knownhosts file, which makes it easier for an attacker that...

[EXPL] TCP Chat(TCPX) DoS (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

DEBIAN-CVE-2005-0446

Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service crash via certain DNS responses regarding 1 Fully Qualified Domain Names FQDN in fqdncache.c or 2 IP addresses in ipcache.c, which trigger an assertion failure...

security flaw

Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via 1 an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the hostaton function, or 2 the -bh command line option or dnsdb PTR...

security flaw

The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service child process crash via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool...

PT-2004-1001 · Fanuc +7 · Fanuc 32I +8

Name of the Vulnerable Software and Affected Versions: Transmission Control Protocol TCP affected versions not specified FANUC 32i affected versions not specified All Cisco products which contain a TCP stack affected versions not specified FortiOS affected versions not specified Description: The...

Cisco Security Advisory: Vulnerabilities in H.323 Message Processing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in H.323 Message Processing Document ID: 47843 Revision 1.0 - INTERIM For Public Release 2004 January 13 UTC 1200 - -------------------------------------------------------------------------- Contents ========...

PT-2003-1620 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.12 and earlier Description: The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow...

[SECURITY] [DSA-196-1] New BIND packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 196-1 [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 14th, 2002 http://www.debian.org/security/faq -...

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (1)

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service 1 // source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard...

[NHC20000504a.0: NetBSD Panics when sent unaligned IP options]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII ,=wwmmm=, .,=""" "M ,gP" "& M & ,d" M, ,R "k ,P "k F W , Vk W '$ ,W M ,F M $ M J$ ,,,====,,, ,mM""""""MM@ W MP',,===="""""""",aP""""Mww M gF '& ,,0" -^ -"""""""F ' 'M& $ ,W $...

Subject: [SECURITY] New version of kernel-image for sparc fixes DoS attack

As is widely known by now the Linux 2.2.x kernels had a problem with parsing IP options, which made them susceptible to a DoS attack. The Debian GNU/Linux 2.1 release for the Sun sparc architecture uses such a kernel. If you are using such a system and havent upgraded the kernel yourself, we...

PT-1999-1114 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux versions 2.2.3 and earlier Description: The issue allows a remote attacker to perform an IP fragmentation attack, causing a denial of service. Recommendations: For Linux versions 2.2.3 and earlier, at the moment, there is no information...

PT-1999-1019 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue is related to how Windows NT TCP/IP processes fragmented IP packets, which can cause a denial of service. Recommendations: At the moment, there is no information about a newer...

PT-1997-1145

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue concerns a machine with IP forwarding enabled, despite not being a router or firewall. This configuration could potentially lead to unauthorized access or misuse of network...

PT-1997-1150 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows IP traceroute from arbitrary hosts. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...