CVE-2006-4911

The CVE-2006-4911 issue affects Cisco IPS, specifically versions prior to 5.0(6p2) and 5.1 prior to 5.1(2) when deployed in inline or promiscuous mode. A crafted sequence of fragmented IP packets could bypass traffic inspection, enabling attackers to pass malicious traffic without detection. Reme...

CVE-2006-4911

Unspecified vulnerability in Cisco IPS 5.0 before 5.06p2 and 5.1 before 5.12, when running in inline or promiscuous mode, allows remote attackers to bypass traffic inspection via a "crafted sequence of fragmented IP packets"...

CVE-2006-4910: Undefined Security Weakness

The web administration interface mainApp to Cisco IDS before 4.15c, and IPS 5.0 before 5.06p1 and 5.1 before 5.12 allows remote attackers to cause a denial of service unresponsive device via a crafted SSLv2 Client Hello packet...

Cisco Intrusion Prevention System Management Interface Denial of Service and Fragmented Packet Evasion Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Intrusion Prevention System DoS and protection bypass

Malformed SSLv2 handshake DoS, fragmented packets filtering evasion...

Cisco Security Advisory: Cisco Intrusion Prevention System Management Interface Denial of Service and Fragmented Packet Evasion Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Intrusion Prevention System Management Interface Denial of Service and Fragmented Packet Evasion Vulnerabilities Document ID: 71558 Advisory ID: cisco-sa-20060920-ips...

Cisco IPS fails to properly check fragmented IP packets

Overview Cisco IPS systems may fail to check specially-crafted IP packets that are fragmented. Description Some Cisco intrusion prevention system IPS products can be configured as passive intrusion detection systems IDS or active IPS systems. Cisco refers to the IPS mode as "inline" and the IDS...

Updating IPS Blade with the Latest Dynamic Protections

IPS dynamic updates are available to customers who have purchased the IPS subscription service. Customers with valid subscription license can choose the attacks to defend against, read detailed information about the attack, configure parameters for each attack defense, including logging options,...

CORE-2006-0714: Microsoft SRV.SYS SMB_COM_TRANSACTION Denial of Service

Core Security Technologies Advisory http://www.coresecurity.com Microsoft SRV.SYS SMBCOMTRANSACTION Denial of Service Date Published: 2006-08-14 Last Update: 2006-08-14 Advisory ID: CORE-2006-0714 Bugtraq ID: 19215 CVE Name: CVE-2006-3942 Title: Microsoft SRV.SYS SMBCOMTRANSACTION Denial of Servi...

TSRT-06-07: eIQnetworks Enterprise Security Analyzer Monitoring Agent Buffer Overflow Vulnerabilities

TSRT-06-07: eIQnetworks Enterprise Security Analyzer Monitoring Agent Buffer Overflow Vulnerabilities http://www.tippingpoint.com/security/advisories/TSRT-06-07.html August 8, 2006 -- CVE ID: CVE-2006-3838 -- Affected Vendor: eIQnetworks -- Affected Products: Enterprise Security Analyzer --...

Cisco VPN Concentrator IKE resource exhaustion DoS Advisory

Cisco VPN Concentrator IKE resource exhaustion DoS Advisory 1. Overview NTA Monitor discovered a denial of service vulnerability in the Cisco VPN 3000 series concentrator products while performing a VPN security test for a customer in July 2005. The vulnerability affects Phase-1 of the IKE...

CVE-2006-3678

TippingPoint IPS running the TippingPoint Operating System TOS before 2.2.4.6519 allows remote attackers to "force the device into layer 2 fallback L2FB", causing a denial of service page fault, via a malformed packet...

CVE-2006-3678

TippingPoint IPS running the TippingPoint Operating System TOS before 2.2.4.6519 allows remote attackers to "force the device into layer 2 fallback L2FB", causing a denial of service page fault, via a malformed packet...

CVE-2006-3678

CVE-2006-3678 affects the TippingPoint IPS running the TippingPoint Operating System (TOS) prior to 2.2.4.6519. The issue allows remote attackers to force the device into layer 2 fallback (L2FB), causing a denial of service (page fault) by sending a malformed packet. The available documents speci...

Internet Key Exchange Protocol Version 1 Denial of Service Vulnerability

Multiple products contain a vulnerability in the implementation of the Internet Key Exchange IKE version 1 protocol. IKE is typically used for key exchange in IPSec, and IPSec is commonly used to encrypt data for VPN connections. The vulnerability affects IKE Phase 1 negotiations in both Main Mod...

CVE-2006-3678: Undefined Security Weakness

TippingPoint IPS running the TippingPoint Operating System TOS before 2.2.4.6519 allows remote attackers to "force the device into layer 2 fallback L2FB", causing a denial of service page fault, via a malformed packet...

CVE-2006-3596

The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System IPS 5.11 through 5.1p1, as installed on various Cisco Intrusion Prevention System 42xx appliances, allows remote attackers to cause a denial of service kernel panic and possibly network outage via a...

MS-RPC Programs Lookup (CVE-2006-1314)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

CVE-2006-3596

The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System IPS 5.11 through 5.1p1, as installed on various Cisco Intrusion Prevention System 42xx appliances, allows remote attackers to cause a denial of service kernel panic and possibly network outage via a...

CVE-2006-3596

CVE-2006-3596 affects Cisco IPS 5.1(1)–5.1(p1) on various 42xx appliances, where the Intel-based gigabit NIC driver can be triggered by a crafted IP packet to cause a kernel panic and potential network outage (denial of service). The vulnerability is rooted in the device driver used by Intel-base...