DOS во встроенном NAT сервере Windows 2000

Обнаружил dos во встроенном NAT сервере Windows 2000 Конфигурация проверенных серверов: Windows 2000 English Standard/Advanced Service Pack 4 + Update Rollup 1 for Service Pack 4 с установленным NAT сервером. При прохождении ip пакетов через сервер, с включенной опцией "Loose Source and Record...

CVE-2006-0309: Undefined Security Weakness

Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length...

Multiple HP-UX vulnerabilities

IP packets DoS, IPSec remote unauthorized access...

CVE-2004-2641

Unspecified vulnerability in Sun Fire 3800/4800/4810/6800, Sun Fire V1280, and Netra 1280 allows remote attackers to cause a denial of service system controller hang via IP Packets With Type of Service TOS Bits set...

CVE-2004-2641: Undefined Security Weakness

Unspecified vulnerability in Sun Fire 3800/4800/4810/6800, Sun Fire V1280, and Netra 1280 allows remote attackers to cause a denial of service system controller hang via IP Packets With Type of Service TOS Bits set...

ZyxelIPHandling.txt

|| || Infobyte Security Research || www.infobyte.com.ar || 04.08.2005 || .:: SUMMARY Prestige 650R-31 ADSL Router -CPU exausting handling malformed fragmented packets Affected ZyNOS FW v3.40KO.1 It is suspected that all previous versions of ZyNOS are vulnerable. .:: BACKGROUND Zyxel Prestige 600...

CVE-2001-1540

CVE-2001-1540 affects IPRoute versions 0.973, 0.974, and 1.18. According to the connected sources, remote attackers can cause a denial of service by sending fragmented IP packets that split the TCP header. The information consistently describes a network-exposed DoS condition but does not provide...

CVE-2001-1540

IPRoute 0.973, 0.974 and 1.18 allows remote attackers to cause a denial of service via fragmented IP packets that split the TCP header...

CVE-2001-1554

IBM AIX 430 is affected by CVE-2001-1554 due to improper unlocking of IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) by sending PMTU IP packets. The impact is a partial loss of availability as described in the sources. The connected documents confirm the root cause...

CVE-2001-1540: Undefined Security Weakness

IPRoute 0.973, 0.974 and 1.18 allows remote attackers to cause a denial of service via fragmented IP packets that split the TCP header...

CVE-2001-1554: Undefined Security Weakness

IBM AIX 430 does not properly unlock IPPMTULOCK, which allows remote attackers to cause a denial of service hang via Path Maximum Transmit Unit PMTU IP packets...

CVE-2002-1712

Microsoft Windows 2000 is affected by CVE-2002-1712: a remote attacker can cause a denial of service via memory consumption by flooding the NetBIOS port (TCP/139) with empty TCP/IP packets that have ACK and FIN bits set, as shown by stream3. Impact is described as partial availability. The provid...

CVE-2002-1779: Undefined Security Weakness

The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 NPW does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 CVE-2000-0305...

CVE-2002-1712: Undefined Security Weakness

Microsoft Windows 2000 allows remote attackers to cause a denial of service memory consumption by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port TCP/139, as demonstrated by stream3...

Multiple Clavister Security Gateway Appliance Firewall vulnerabilities

DoS on IP packets handling. Weak authentication mechanism...

CVE-2005-1717

ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40KO.1 allows remote attackers to cause a denial of service CPU consumption and network loss via crafted fragmented IP packets...

CVE-2005-1717

The CVE-2005-1717 entry concerns ZyXEL Prestige 650R-31 routers running ZyNOS FW v3.40(KO.1). Affected component: the device’s IP stack handling of fragmented packets. Root cause: crafted fragmented IP packets that lead to denial of service via sustained CPU usage and network loss. Impact: remote...

CVE-2005-1717

ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40KO.1 allows remote attackers to cause a denial of service CPU consumption and network loss via crafted fragmented IP packets...

CVE-2005-1717: Undefined Security Weakness

ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40KO.1 allows remote attackers to cause a denial of service CPU consumption and network loss via crafted fragmented IP packets...

[Full-disclosure] [ISR] Zyxel Prestige 650R-31 Denial Of Service

|| || Infobyte Security Research || www.infobyte.com.ar || 04.08.2005 || .:: SUMMARY Prestige 650R-31 ADSL Router -CPU exausting handling malformed fragmented packets Affected ZyNOS FW v3.40KO.1 It is suspected that all previous versions of ZyNOS are vulnerable. .:: BACKGROUND Zyxel Prestige 600...