CVE-2006-2444

The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...

CVE-2006-2444

CVE-2006-2444 affects the Linux kernel SNMP NAT Netfilter processing. The vulnerability in snmp_trap_decode (kernel = 2.6.16.18) or applying vendor patches where applicable. No additional exploitation details are provided in the documents.

CVE-2006-2444: Undefined Security Weakness

The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...

SEC-20060512-0.txt

SEC Consult Security Advisory 20060512-0 ============================================================== title: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure program: Symantec Enterprise FW vulnerable version: 8.0 homepage: www.symantec.com found: 2005-09-13 by: SEC Consult /...

Design/Logic Flaw

The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI...

CVE-2006-2341

The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI...

CVE-2006-2341

CVE-2006-2341 affects Symantec Gateway Security 5000 Series (versions 2.0.1 and 3.0) and Symantec Enterprise Firewall 8.0. When NAT is in use, the HTTP proxy can be abused by remote attackers to determine internal IP addresses by sending malformed HTTP requests—specifically a GET request with no ...

[Full-disclosure] SEC Consult SA-20060512-0 :: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure

SEC Consult Security Advisory 20060512-0 ============================================================== title: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure program: Symantec Enterprise FW vulnerable version: 8.0 homepage: www.symantec.com found: 2005-09-13 by: SEC Consult /...

RFC 3947 NAT-T VPN Detection

Binary data 3571.prm...

Symantec Enterprise Firewall NAT/HTTP Proxy internal IP leakage

SUMMARY An information leak has been discovered in the HTTP proxy of the Symantec Enterprise Firewall and Symantec Gateway Security products. In response to specific http requests, the firewall may reveal internal addresses otherwise hidden by Network Address Translation NAT. Severity Very Low...

Symantec Enterprise Firewall / Gateway Security - HTTP Proxy Internal IP Leakage

source: https://www.securityfocus.com/bid/17936/info Symantec Enterprise Firewall and Gateway Security products are prone to an information-disclosure weakness. The vendor has reported that the NAT/HTTP proxy component of the products may reveal the internal IP addresses of protected computers. A...

Use a SNIFFER to monitor the QQ number and obtain the IP address of the method-vulnerability warning-the black bar safety net

Yesterday when the Internet, found this forum. I was in the study how to use MRTG to monitor Huawei router and switch CPU utilization, inadvertently found this forum. This problem has not yet found a solution. Today sleep early, middle of the night is up, sigh of relief to see the Forum a lot of...

Telecommunication disable routing Internet crack method-vulnerability warning-the black bar safety net

ADSL share Internet access, there are two ways, one is proxy, one is the Address Translation（NAT），we often say that the routing is actually NAT mode, in fact the Routing and NAT principles there are still differences, there will not be discussed, now the ADSL cats generally have the NAT function,...

Code injection

Linksys WRT54G routers version 5 running VXWorks allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DCC SEND...

Code injection

Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DC...

CVE-2006-1068

Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DC...

CVE-2006-1067

Linksys WRT54G routers version 5 running VXWorks allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DCC SEND...

CVE-2006-1068

Affected products: Netgear 614 and 624 routers (likely VXWorks). Vulnerability: remote attacker can cause a denial of service by sending a malformed DCC SEND string to an IRC channel, leading to an IRC connection reset. Possible cause: linked to masquerading code for NAT environments; details men...

CVE-2006-1067

CVE-2006-1067 affects Linksys WRT54G routers versions 5 running VXWorks. The vulnerability allows remote attackers to trigger a denial-of-service by sending a malformed DCC SEND string to an IRC channel, causing an IRC connection reset. The issue may be related to masquerading code for NAT enviro...

CVE-2006-1067

Linksys WRT54G routers version 5 running VXWorks allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DCC SEND...