Design/Logic Flaw

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service IOMMU space exhaustion and system crash by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping...

CVE-2009-3613

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service IOMMU space exhaustion and system crash by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping...

CVE-2009-3613

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service IOMMU space exhaustion and system crash by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping...

PT-2009-5890 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.27.22 Description: The issue allows remote attackers to cause a denial of service, resulting in IOMMU space exhaustion and system crash. This can be achieved by using jumbo frames for a large amount of netwo...

CVE-2009-3164

Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv122, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo frame...

Design/Logic Flaw

Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv122, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo frame...

CVE-2009-2136

Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv117, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo...

Authentication flaw

Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv117, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo...

CVE-2009-2136

Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv117, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo...

CVE-2009-2136

Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv117, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo...

CVE-2009-2136

CVE-2009-2136 affects Sun Solaris 10 and OpenSolaris (various snv builds) when the Cassini GigaSwift Ethernet Adapter interface is used. The issue is an unspecified vulnerability in the TCP/IP networking stack that allows a remote attacker to cause a denial of service (panic) via vectors involvin...

Solaris 5.2 (sparc) : 102381-01

FLEXlm 4.0 jumbo patch. Date this patch was last updated by Sun : Apr/26/95 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

CVE-2008-6477

SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

Sql injection

SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2008-6477

CVE-2008-6477 involves a SQL injection vulnerability in Mumbo Jumbo Media OP4, where an attacker can send crafted input to the id parameter in index.php to execute arbitrary SQL commands. Affected: Mumbo Jumbo Media OP4. Root cause and exact exploit flow are not detailed in the provided documents...

CVE-2008-6477

SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

Cisco IPS平台Inline模式拒绝服务漏洞

BUGTRAQ ID: 29791 CVECAN ID: CVE-2008-2060 Cisco入侵保护系统是网络安全设备中的一部分，可提供基于网络的威胁防范服务。 某些Cisco IPS平台在处理巨型以太网报文时存在拒绝服务漏洞。如果以inline模式所部署的有漏洞Cisco IPS平台的千兆网口接收到了特定的巨型以太网帧的话，就会出现内核忙碌，导致平台完全失效和网络拒绝服务的情况。仅以混杂模式部署的平台或没有千兆网口的平台不受漏洞影响。 成功利用本文所述的漏洞可能导致网络拒绝服务，必须断电才能恢复运行。Cisco IPS...

Cisco Intrusion Prevention System DoS

Problem on jumbo-frames parsing...

Cisco Security Advisory: Cisco Intrusion Prevention System Jumbo Frame Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Intrusion Prevention System Jumbo Frame Denial of Service Advisory ID: cisco-sa-20080618-ips Revision 1.0 For Public Release 2008 June 18 1600 UTC GMT +--------------------------------------------------------------------...

CVE-2008-2060

Unspecified vulnerability in Cisco Intrusion Prevention System IPS 5.x before 5.18E2 and 6.x before 6.05E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of service panic, and possibly bypass intended restrictions on network traffic, via a...