Linux Kernel <= 2.6.21.1 - IPv6 Jumbo Bug Remote DoS Exploit

No description provided by source. / Clemens Kurtenbach ckurtenbach at s21sec . com PoC code for exploiting the jumbo bug found in linux kernels =2.6.20 and =2.6.21.1 gcc -O2 ipv6jumbocrash.c -o ipv6jumbocrash / / io / include stdio.h include string.h include stdlib.h / network / include...

Apple Mac OS X xnu <= 1228.3.13 - IPv6-ipcomp Remote kernel DoS PoC

No description provided by source. / xnu-ipv6-ipcomp.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.3.13 ipv6-ipcomp remote kernel DoS POC by mu-b - Sun 24 Feb 2008 - Tested on: Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.2 xnu-1228.3.131/RELEASEI386...

Linux Kernel < 2.6.20.2 - IPv6_Getsockopt_Sticky Memory Leak PoC

No description provided by source. / Linux Kernel IPV6GetsockoptSticky Memory Leak Proof Of Concept dreyer 07-2007 Osu, Tatakae, Sexy Pandas! Dumps to stdout the memory mapped between INI and END. CVE: CVE-2007-1000 BID: 22904 Affected: Linux Kernel 2.6.20.2...

MS Windows XP/2003 - IPv6 Remote Denial of Service Exploit

No description provided by source. // // Example usage: LandIpV6 \Device\NPFB1751317-BAA0-43BB-A69B-A0351960B28D //fe80::2a1:b0ff:fe08:8bcc 135 // // Written by: Konrad Malewski. // include stdlib.h include stdio.h include Winsock2.h include ws2tcpip.h include pcap.h include remote-ext.h...

SunOS Release 5.11 snv_101b - Remote IPv6 Crash Exploit

No description provided by source. / SunOS Release 5.11 Version snv101b Remote IPV6 Kernel Crash Exploit 0day By Kingcope/2009 / include stdio.h include string.h include stdlib.h include netinet/in.h include netdb.h include sys/time.h include sys/types.h include sys/socket.h include arpa/inet.h...

Microsoft Windows VISTA/2008 ICMPv6 Router Advertisement Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38061/info Microsoft Windows TCP/IP protocol implementation is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful attacks...

Multiple Platform IPv6 Address Publication - Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29190/info Multiple operating systems are prone to remote denial-of-service vulnerabilities that occur when affected operating systems are acting as IPv6 routers. Successful exploits allow remote attackers to cause...

Linux Kernel 2.6.x - IPv6_SockGlue.c NULL Pointer Dereference Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23142/info The Linux kernel is prone to a NULL-pointer dereference vulnerability. A local attacker can exploit this issue to crash the affected application, denying service to legitimate users. The attacker may also be ab...

Linux Kernel 2.6.x 'net/ipv6/ip6_output.c' NULL Pointer Dereference Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38185/info The Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to crash the affected kernel, denying service to legitimate users. Given the nature of this issue, attacker...

Snort <= 2.8.5 - IPv6 DoS

No description provided by source. ============================================= - Date: October 22th, 2009 - Discovered by: Laurent Gaffi - Severity: Low ============================================= I. VULNERABILITY ------------------------- Snort = 2.8.5 IPV6 Remote DoS II. DESCRIPTION...

Linux Kernel 2.6.22 IPv6 Hop-By-Hop Header Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26943/info The Linux kernel is prone to a remote denial-of-service vulnerability because it fails to adequately validate specially crafted IPv6 'Hop-By-Hop' headers. Attackers can exploit this issue to cause a kernel pani...

FreeBSD 3.x/4.x ipfw Filtering Evasion Vulnerability

No description provided by source. source: www.securityfocus.com/bid/2293/info There exists a serious vulnerability in FreeBSD's implementation of packet filtering for IPv4 and IPv6. The vulnerability exists in situations where a filtering rule permits packets through if they are part of an...

Kaspersky Internet Security 2013 - Denial of Service Vulnerability

No description provided by source. I usually do not write security advisories unless absolutely necessary. This time I should, however I have neither the time, nor the desire to do so. But Kaspersky did not react, so ... quick and dirty: Kaspersky Internet Security 2013 and any other Kaspersky...

Ubuntu: Security Advisory (USN-2255-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco IOS XR Software IPv6 Malformed Packet DoS (cisco-sa-20140611-ipv6)

According to its self-reported version, the version of Cisco IOS XR running on the remote host is affected by a denial of service vulnerability due to the improper handling of IPv6 packets. A remote, unauthenticated attacker can cause the device to lock up by rapidly sending specially crafted IPv...

Juniper ScreenOS 6.3 < 6.3.0r17 IPv6 Packet DoS

The remote host is running a version of Juniper ScreenOS 6.3 prior to 6.3.0r17. It is, therefore, affected by a denial of service vulnerability. A denial of service flaw exists when handling a specially crafted IPv6 packet sequence. This could allow a remote attacker to cause the device to crash ...

Fedora 20 : openstack-neutron-2013.2.3-9.fc20 (2014-7446)

Fixed a security issue that allowed an authorised user to break Neutron L3-agent using a IPv6 subnet. This is an update that fixes problems communicating with the latest upstream stable Qpid = 0.28. Note that Tenable Network Security has extracted the preceding description block directly from the...

USN-2255-1: OpenStack Neutron vulnerabilities

Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Neutron did not properly set up its sudo configuration. If a different flaw was found in OpenStack Neutron, this vulnerability could be used to escalate privileges. CVE-2013-6433 Stephen Ma and Christoph Thiel discovered that the...

SuSE 11.3 Security Update : openssh (SAT Patch Number 9357)

This update for OpenSSH fixes the following issues : - Exit sshd normally when port is already in use. bnc832628 - Use hardware crypto engines where available. bnc826427 - Use correct options for login when it is used. bnc833605 - Move FIPS messages to higher debug level. bnc862875 - Fix forwardi...

[oss-security] CVE request for vulnerability in OpenStack Neutron

A vulnerability was discovered in OpenStack see below. In order to ensure full traceability, we need a CVE number assigned that we can attach to further notifications. This issue is already public, although an advisory was not sent yet. Title: Neutron L3-agent DoS through IPv6 subnet Reporter:...