105 matches found
Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)
/ ecl-winipdos.c - 16/04/05 Yuri Gushin Alex Behar This one was actually interesting, an off-by-one by our beloved M$ : When processing an IP packet with an option size 2nd byte after the option of 39, it will crash - since the maximum available size is 40 for the whole IP options field, and two...
Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)
Microsoft Windows - Malformed IP Options Denial of Service MS05-019 / ecl-winipdos.c - 16/04/05 Yuri Gushin Alex Behar This one was actually interesting, an off-by-one by our beloved M$ : When processing an IP packet with an option size 2nd byte after the option of 39, it will crash - since the...
Microsoft Windows does not adequately validate IP options
Overview Microsoft Windows does not adequately validate IP options, allowing an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service. An attacker could take complete control of a vulnerable system. Description Several versions of the Microsoft Windows IP stack a...
CVE-2004-2652
The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of service crash via packets with invalid TCP/IP options, which trigger a null dereference...
security flaw
Memory leak in the ipoptionsget function in the Linux kernel before 2.6.10 allows local users to cause a denial of service memory consumption by repeatedly calling the ipcmsgsend function...
PT-2004-2256 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.10 Description: The issue is related to an integer overflow in the ip options get function, which can be exploited by local users to cause a denial of service, resulting in a kernel crash. This is achieved b...
Kerio Personal Firewall 4.1.1 - Multiple IP Options Denial of Service Vulnerabilities
Kerio Personal Firewall 4.1.1 - Multiple IP Options Denial of Service Vulnerabilities / HOD-kerio-firewall-DoS-expl.c: 2004-11-10 Copyright c 2004 houseofdabus Kerio Personal Firewall Multiple IP Options Denial of Service PoC Coded by .:: houseofdabus ::. Bug discoveried by eEye:...
Kerio Firewall DoS
Problem with IP options processing allow to crash firewall with single packet...
Inkra 1504GX DoS
Invalid IP options handling...
CVE-2002-1832
Unknown vulnerability in the "ipopts decode" functionality in Firestorm IDS 0.4.0 through 0.4.2 allows remote attackers to cause a denial of service crash via certain IP options...
CVE-2002-0604
Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service crash via a large number of packets with malformed IP options...
CVE-2002-0527
Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service crash and reboot when SOHO forwards a packet with bad IP options...
CVE-2002-0604
Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service crash via a large number of packets with malformed IP options...
KPMG-2002017: Snapgear Lite+ Firewall Denial of Service
-------------------------------------------------------------------- Title: Snapgear Lite+ Firewall Denial of Service BUG-ID: 2002017 Released: 02nd May 2002 -------------------------------------------------------------------- Problem: ======== Several issues with the Snapgear Lite+ Firewall coul...
Security Advisory: Cisco VPN3000 Concentrator IP Options Vulnerabil
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: VPN 3000 Concentrator IP Options Vulnerability ============================================================================= Revision 1.0 For Public Release 2001 April 12 at 1500 UTC...
DoS против Cisco VPN 3000 (ip option)
Исопльзуя некорректные ip options можно вызвать отказ маршрутизатора в пределах локального сегмента...
VPN 3000 Concentrator IP Options Vulnerability
...
FreeBSD-SA-00:23.ip-options
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:23 Security Advisory FreeBSD, Inc. Topic: Remote denial-of-service in IP stack REVISED Category: core Module: kernel Announced: 2000-06-19 Revised: 2000-07-11 Affects:...
NetBSD Security Advisory 2000-002
NetBSD Security Advisory 2000-002 ================================= Topic: IP options processing Denial of Service Version: NetBSD 1.4.2 and prior; NetBSD-current until 20000507. Severity: Network-connected systems can be crashed remotely. Abstract ======== Receipt of IP packets with certain...