Important: kernel security update

2.6.9-55.0.9.0.1 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix for nfs open call taking longer issue Chuck Lever orabug 5580407 bz 219412 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach...

Moderate: kernel security and bugfix update

2.6.9-55.0.6.0.1 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix for nfs open call taking longer issue Chuck Lever orabug 5580407 bz 219412 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach...

Important: kernel security update

2.6.9-55.0.2.0.1 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix for nfs open call taking longer issue Chuck Lever orabug 5580407 bz 219412 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach...

Microsoft Windows XP2003 - Metafile Escape() Code Execution (Metasploit)

Microsoft Windows XP2003 - Metafile Escape Code Execution Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the cor...

[Full-disclosure] ICMP-based blind performance-degrading attack

Folks, Another trivial ICMP-based attack. We'll use the tool icmp-mtu, available at http://www.gont.com.ar/tools/icmp-attacks We'll perform the blind performance-degrading attack described in http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html as the "Attack against the Path-MTU Discovery...

HPSBTU01210 SSRT4743, SSRT4884 rev.0 - HP Tru64 UNIX TCP/IP remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBTU01210 REVISION: 0 SSRT4743, SSRT4884 rev.0 - HP Tru64 UNIX TCP/IP remote Denial of Service DoS NOTICE: There are no restrictions for distribution of this Security Bulletin provided that it remains complete and intact. The...

CVE-2004-1060

CVE-2004-1060 enables a denial-of-service via forged ICMP PMTU-discovery packets that degrade TCP throughput. Connected advisories show affected BIG-IP products and data-plane components; vulnerable versions include BIG-IP LTM/AAM/AFM/etc. for 10.x–11.x releases (e.g., 11.0.0–11.6.0, 10.0.0–10.2....

TCP/IP implementations do not adequately validate ICMP error messages

Overview Multiple TCP/IP implementations do not adequately validate ICMP error messages. A remote attacker could cause TCP connections to drop or be degraded using spoofed ICMP error messages. Description A number of widely accepted Internet standards describe different aspects of the relationshi...

Multiple Vendor ICMP Implementation - Malformed Path MTU Denial of Service

source: https://www.securityfocus.com/bid/13124/info Multiple vendor implementations of TCP/IP Internet Control Message Protocol ICMP are reported prone to several denial-of-service attacks. ICMP is employed by network nodes to determine certain automatic actions to take based on network failures...

CVE-2005-0067

Technical details for CVE-2005-0067 (affected software/versions, root cause, impact, and fixes) are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2005-0068

CVE-2005-0068 is attack-based and tied to ICMP handling flaws (forgeable ICMP errors affecting TCP/Path MTU) with related CVEs (2004-0790/0791/1060). Connected documents provide concrete details: ICMP authentication gaps enable denial-of-service via spoofed messages (Destination Unreachable, Sour...

CVE-2005-0065

The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been sent but not acknowledged aka "TCP sequence number checking", which makes it easier for attackers to forge ICMP error messages for specifi...

CVE-2004-0257

OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service crash by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port...

CVE-2004-0257

Technical details about CVE-2004-0257 are not publicly provided in the supplied documents. Available records describe a DoS condition via IPv6 MTU-related packets but do not specify affected products, versions, root cause, or mitigations. Monitor for updates.

CVE-2004-0257

OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service crash by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port...

CVE-2004-1060

Multiple TCP/IP and ICMP implementations, when using Path MTU PMTU discovery PMTUD, allow remote attackers to cause a denial of service network throughput reduction for TCP connections via forged ICMP "Fragmentation Needed and Don't Fragment was Set" packets with a low next-hop MTU value, aka the...

OpenBSD IPv6 DoS

Kernel crashes on TCP connection request received after small MTU requested with ICMPV6PKTTOOBIG...

CVE-2002-0276

CVE-2002-0276 describes a buffer overflow in various decoders of Ettercap ≤ 0.6.3.1 when running on networks with MTU > 2000, allowing remote attackers to execute arbitrary code via large packets. The entry specifies the affected software (Ettercap) and version range, the root cause (buffer ov...

CVE-2002-0276

Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than 2000, allows remote attackers to execute arbitrary code via large packets...

ettercap-0.6.3.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Next Generation Security Technologies http://www.ngsec.com Security Advisory Title: Ettercap, remote root compromise ID: NGSEC-2002-1 Application: ettercap 0.6.3.1 and older http://ettercap.sourceforge.net Date: 05/02/2002 Status: Vendor Contacted, ne...