Cisco IOS Interface Blocked by IPv4 Packets

...

CCBill WhereAmI.CGI Remote Arbitrary Command Execution Vulnerability

Description It has been reported that whereami.cgi distributed by CCBill does not properly handle some types of input. Because of this, an attacker may be able to gain access to a system with the privileges of the web server process. Technologies Affected CCBill whereami.cgi Recommendations Block...

[SECURITY] [DSA-313-1] New ethereal packages fix buffer overflows, integer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 313-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 11th, 2003 http://www.debian.org/security/faq -...

DSA-313 ethereal - buffer overflows, integer overflows

Bulletin has no description...

tcpdump enters infinite loop when parsing crafted ISAKMP packets

Overview There is a denial-of-service vulnerability in tcpdump that may allow a remote attacker to cause tcpdump to enter an infinite loop. Description tcpdump, a tool used to monitor network traffic, has the ability to capture Internet Security Association and Key Management Protocol ISAKMP...

Moderate: Red Hat Security Advisory: : Updated ethereal packages fix security vulnerabilities

Updated ethereal packages are now available which fix a format string bug and a heap-based buffer overflow. Ethereal is a package designed for monitoring network traffic on your system. Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service crash and possibly execute...

SGI IRIX sets insecure permissions on "/dev/ipfilter"

Overview A locally exploitable denial-of-service vulnerability in SGI IRIX may allow a local attacker to disrupt network traffic. Description SGI IRIX contains a locally exploitable denial-of-service vulnerability. For more information, please see SGI Security Advisory 20020408-01-I. --- Impact A...

TCPDump 3.63.7 - Malformed RADIUS Packet Denial of Service

TCPDump 3.63.7 - Malformed RADIUS Packet Denial of Service source: https://www.securityfocus.com/bid/7090/info It has been reported that tcpdump is vulnerable to a denial of service when some packet types are received. By sending a maliciously formatted packet to a system using a vulnerable versi...

TCPDump 3.6/3.7 - Malformed RADIUS Packet Denial of Service

source: https://www.securityfocus.com/bid/7090/info It has been reported that tcpdump is vulnerable to a denial of service when some packet types are received. By sending a maliciously formatted packet to a system using a vulnerable version of tcpdump, it is possible for a remote user to cause...

DSA-258 ethereal - format string vulnerability

Bulletin has no description...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages are available which fix various security issues. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 Ethereal is a package designed for monitoring network traffic on your system. Several security issues have been found in the Ethereal packages distribut...

Moderate: Red Hat Security Advisory: : Updated Ethereal packages are available

Updated Ethereal packages are available which fix various security issues. Ethereal is a package designed for monitoring network traffic on your system. Several security issues have been found in the Ethereal packages distributed with Red Hat Linux versions 7.2, 7.3, and 8.0 Multiple integer...

CVE-2002-2326

The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic...

CVE-2002-2254

The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID PID to access certain network traffic that would...

Moderate: Red Hat Security Advisory: : Updated ethereal packages available

Updated ethereal packages are available for Red Hat Powertools 6.2, 7, and 7.1. These packages are required for the Red Hat Security Advisory regarding applications linked against the old ucd-snmp libraries and also fix other security issues in ethereal. Ethereal is a network traffic analyzer and...

Denial of Service in ZyXEL prestige 642R w/ZyNOS v2.50(FA.1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Description: A single jolt1 packet will cause the router to stop passing traffic from the internal network for exactly 30 seconds. Affected versions: ZyNOS S/W Version: V2.50FA.1 | 1/22/2002 and below Notes: A friendly soul told us this affected other...

Sun SunPCi II VNC Software 2.3 - Password Disclosure

Sun SunPCi II VNC Software 2.3 - Password Disclosure // source: https://www.securityfocus.com/bid/5146/info The SunPCi II card is a co-processor for a number of Solaris based systems, and provides PC software compatibility, including the ability to run Microsoft Windows. Driver software is...

CVE-2001-1231

GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames and passwords from sniffed network traffic, as addressed by the "Padlock" fix...

Moderate: Red Hat Security Advisory: : Updated ethereal packages are available

Updated ethereal packages are available which fix several security problems. Ethereal is a package designed for monitoring network traffic on your system. Several security issues have been found in Ethereal: Due to improper string and error handling in Ethereal's ASN.1 parser, it is possible for ...

EUVD-2001-1225

Multiple TCP implementations could allow remote attackers to cause a denial of service bandwidth and CPU exhaustion by setting the maximum segment size MSS to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traff...