CVE-2008-1804

CVE-2008-1804 targets Sourcefire Snort up to version 2.8.0: the preprocessor spp_frag3.c fails to correctly identify packet fragments with dissimilar TTL values, enabling a remote attacker to bypass detection rules by using different TTLs on each fragment. The issue is tied to Snort’s fragment-ha...

CVE-2008-1804

preprocessors/sppfrag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using a different TTL for each fragment...

CVE-2008-1804

Removed by vendor...

snort IDS protection bypass

Packet's fragments with significant TTL difference are ignored...

CVE-2008-1804: Undefined Security Weakness

preprocessors/sppfrag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using a different TTL for each fragment...

CVE-2006-0752: Undefined Security Weakness

Niels Provos Honeyd before 1.5 replies to certain illegal IP packet fragments that other IP stack implementations would drop, which allows remote attackers to identify IP addresses that are being simulated using honeyd...

security flaw

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...

CVE-2005-0209

Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service kernel crash via crafted IP packet fragments...

CVE-2005-0210

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...

CVE-2005-0209

Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service kernel crash via crafted IP packet fragments...

CVE-2005-0210

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...

security flaw

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...

CVE-2005-0210

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...

CVE-2005-0210: Undefined Security Weakness

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...

CVE-2005-0209: Improper Input Validation

Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service kernel crash via crafted IP packet fragments...

Debian DSA-297-1 : snort - integer overflow, buffer overflow

Two vulnerabilities have been discovered in Snort, a popular network intrusion detection system. Snort comes with modules and plugins that perform a variety of functions such as protocol analysis. The following issues have been identified : Heap overflow in Snort 'stream4' preprocessor VU139129,...

ROSE Attack - NewDawn3

Exploit for unknown platform in category dos / poc ====================== ROSE Attack - NewDawn3 ====================== /-------------------------------------------------------------/ / Implementation of Rose Attack described by Gandalf gandalf at digital.net Reference: Bugtraq, 30 mars 2004, "IP...

CVE-2002-1140

The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service service hang via malformed packet fragments, aka "Improper parameter size check leading to denial of service."...

CVE-2002-1140: Undefined Security Weakness

The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service service hang via malformed packet fragments, aka "Improper parameter size check leading to denial of service."...

CVE-2001-0867

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are affected by CVE-2001-0867. The vulnerability is that packet fragment filtering is not applied by ACLs when the fragment keyword is used, allowing remote attackers to bypass intended access controls (network-based, no authent...