Multiple Vendor ICMP Implementation - Malformed Path MTU Denial of Service

source: https://www.securityfocus.com/bid/13124/info Multiple vendor implementations of TCP/IP Internet Control Message Protocol ICMP are reported prone to several denial-of-service attacks. ICMP is employed by network nodes to determine certain automatic actions to take based on network failures...

CVE-2005-0067

Technical details for CVE-2005-0067 (affected software/versions, root cause, impact, and fixes) are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2005-0065

The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been sent but not acknowledged aka "TCP sequence number checking", which makes it easier for attackers to forge ICMP error messages for specifi...

CVE-2005-0068

CVE-2005-0068 is attack-based and tied to ICMP handling flaws (forgeable ICMP errors affecting TCP/Path MTU) with related CVEs (2004-0790/0791/1060). Connected documents provide concrete details: ICMP authentication gaps enable denial-of-service via spoofed messages (Destination Unreachable, Sour...

CVE-2005-0067: Undefined Security Weakness

The original design of TCP does not require that port numbers be assigned randomly aka "Port randomization", which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using 1 blind connection-reset attacks with...

CVE-2005-0068: Undefined Security Weakness

The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using 1 blind connection-reset attacks with forged...

CVE-2005-0065: Undefined Security Weakness

The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been sent but not acknowledged aka "TCP sequence number checking", which makes it easier for attackers to forge ICMP error messages for specifi...

CVE-2005-0066: Undefined Security Weakness

The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged aka "TCP acknowledgement number checking", which makes it easier for...

CVE-2004-0257

OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service crash by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port...

CVE-2004-0257

Technical details about CVE-2004-0257 are not publicly provided in the supplied documents. Available records describe a DoS condition via IPv6 MTU-related packets but do not specify affected products, versions, root cause, or mitigations. Monitor for updates.

CVE-2004-0257

OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service crash by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port...

CVE-2004-1060

Multiple TCP/IP and ICMP implementations, when using Path MTU PMTU discovery PMTUD, allow remote attackers to cause a denial of service network throughput reduction for TCP connections via forged ICMP "Fragmentation Needed and Don't Fragment was Set" packets with a low next-hop MTU value, aka the...

OpenBSD IPv6 DoS

Kernel crashes on TCP connection request received after small MTU requested with ICMPV6PKTTOOBIG...

CVE-2002-0276

Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than 2000, allows remote attackers to execute arbitrary code via large packets...

CVE-2002-0276

CVE-2002-0276 describes a buffer overflow in various decoders of Ettercap ≤ 0.6.3.1 when running on networks with MTU > 2000, allowing remote attackers to execute arbitrary code via large packets. The entry specifies the affected software (Ettercap) and version range, the root cause (buffer ov...

CVE-2002-0276: Undefined Security Weakness

Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than 2000, allows remote attackers to execute arbitrary code via large packets...

ettercap-0.6.3.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Next Generation Security Technologies http://www.ngsec.com Security Advisory Title: Ettercap, remote root compromise ID: NGSEC-2002-1 Application: ettercap 0.6.3.1 and older http://ettercap.sourceforge.net Date: 05/02/2002 Status: Vendor Contacted, ne...

Переполнение буфера в Ettercap (buffer overflow)

Переполнение буфера при разборе пакета если MTU 2000...

Ettercap 0.6.3.1 - Large Packet Buffer Overflow

// source: https://www.securityfocus.com/bid/4104/info Ettercap is a multipurpose packet sniffer for Linux and BSD based systems. It includes support for features such as character injection and packet filtering. Ettercap has been ported to Windows. A remotely exploitable buffer overflow conditio...

CVE-2001-0323

The ICMP path MTU PMTU discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing "ICMP Fragmentation needed but Don't Fragment DF set" packets between two target hosts, which could cause one host to lower its MTU when transmitting to the other host...