CVE-2008-5133

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

Design/Logic Flaw

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

CVE-2008-5133

The connected CVE-2008-5133 entry describes Solaris SunOS/OpenSolaris ipnat/IPFilter behavior: on NAT-enabled DNS servers, it improperly alters the source port of a packet when the destination port is DNS, allowing remote attackers to spoof DNS responses and bypass the CVE-2008-1447 protection me...

CVE-2008-5133: Undefined Security Weakness

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

openSUSE 10 Security Update : kernel (kernel-5700)

The openSUSE 10.3 kernel was update to 2.6.22.19. This includes bugs and security fixes. CVE-2008-4576: Fixed a crash in SCTP INIT-ACK, on mismatch between SCTP AUTH availability. This might be exploited remotely for a denial of service crash attack. CVE-2008-3528: The ext234 filesystem code fail...

echoServer Detection

The remote host is running echoServer, which which allows peer-to-peer or client-server applications to connect to one another as a series of outbound connections, which may be helpful in avoiding problems caused by firewalls and NAT'ing routers. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.0. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Cisco IOS, Cisco 10000, uBR10012, uBR7200 and Cisco UCM multiple security vulnerabilities

DoS with L2TP, MPLS, IPS, SIP, SSL vulnerabilities, information leaks, multiple multicast security vulnerabilities, NAT SCP, IOS Software firewall application inspection security vulnerabilities...

Cisco Security Advisory: Cisco IOS NAT Skinny Call Control Protocol Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS NAT Skinny Call Control Protocol Vulnerability Advisory ID: cisco-sa-20080924-sccp http://www.cisco.com/warp/public/707/cisco-sa-20080924-sccp.shtml Revision 1.0 For Public Release 2008 September 24 1600 UTC GMT -...

CVE-2008-3810

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811...

CVE-2008-3811

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810...

Code injection

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811...

Code injection

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810...

CVE-2008-3811

Cisco IOS 12.2 and 12.4 devices with NAT SCCP Fragmentation Support enabled are affected by CVE-2008-3811. The vulnerability allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages. Cisco’s advisory indicates fixes are available and provides a workaround: ...

CVE-2008-3810

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811...

CVE-2008-3810

Cisco IOS 12.2 and 12.4 are vulnerable when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled. A series of segmented SCCP messages can cause a reload (DoS) on affected devices. The vulnerability is tied to the NAT SCCP Fragmentation feature introduced in 12.4(6)T, with CVSS...

CVE-2008-3810: Improper Input Validation

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811...

Cisco IOS NAT Skinny Call控制协议多个远程拒绝服务漏洞

BUGTRAQ ID: 31359 CVE ID: CVE-2008-3810 CVE-2008-3811 CNCVE ID：CNCVE-20083810 CNCVE-20083811 Cisco IOS Skinny Call控制协议是Cisco专利的语音通讯协定，被用来促进在 CallManager与IP电话之间的来电管理功能。 Cisco IOS SCCP协议存在多个问题，远程攻击者可以利用漏洞对服务进行拒绝服务攻击。 Skinny Call Control Protocol SCCP在SCCP客户端和呼叫管理器Call Manager之间启用语音通信，通常CM默认在TCP...

CVE-2008-3811: Improper Input Validation

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol SCCP Fragmentation Support is enabled, allows remote attackers to cause a denial of service device reload via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810...

Cisco IOS NAT Skinny Call Control Protocol Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...