53 matches found
Design/Logic Flaw
Packeteer PacketShaper uses fixed increments in TCP initial sequence number ISN values, which allows remote attackers to predict the ISN value, and perform session hijacking or disruption...
CVE-2007-2782
CVE-2007-2782 concerns Packeteer PacketShaper where fixed increments in TCP initial sequence number (ISN) values make ISNs predictable, enabling remote attackers to predict the ISN and potentially hijack or disrupt sessions. Root cause: deterministic ISN generation. Exploitation details beyond pr...
CVE-2007-2782
Packeteer PacketShaper uses fixed increments in TCP initial sequence number ISN values, which allows remote attackers to predict the ISN value, and perform session hijacking or disruption...
Predictable TCP ISN in Packeteer PacketShaper
Predictable TCP ISN in Packeteer PacketShaper Critical: Less critical Impact: Connection spoofing, DoS Where: Local network Product: Packeteer PacketShaper http://www.packetshaper.com/ Description: The TCP/IP stack of Packeteer PacketShaper is generating predictable initial sequence numbers ISN:...
Packeteer PacketShaper多个缓冲区溢出拒绝服务漏洞
PacketShaper可以为服务供应商提供重要的IP带宽供应与管理解决方案。 PacketShaper在处理超长畸形的用户请求时存在缓冲区溢出漏洞,远程攻击者可能利用此漏洞导致服务器崩溃重启。 如果向PacketShaper发送了带有超长参数(大约1500字节)的有效命令的话,就可能触发缓冲区溢出,导致拒绝服务。watchdog定时器会要求系统重启,这个过程大约需要30秒。这时如果没有设置bypass机制的话,服务就会中断。 Packeteer PacketShaper 9500/ISP 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本:...
Buffer overflow
Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service reset or reboot via 1 a long traffic class argument to the "class show" command or 2 a long POLICY parameter value in clastree.htm...
CVE-2007-0113
Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service reset or reboot via 1 a long traffic class argument to the "class show" command or 2 a long POLICY parameter value in clastree.htm...
CVE-2007-0113
Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service reset or reboot via 1 a long traffic class argument to the "class show" command or 2 a long POLICY parameter value in clastree.htm...
CVE-2007-0113
The CVE-2007-0113 issue affects Packeteer PacketShaper PacketWise 8.x. The root cause is a buffer overflow in the device’s interfaces when handling overly long inputs: (1) a long traffic class argument to the class show command, or (2) a long POLICY parameter value in clastree.htm. The consequenc...
Packeteer PacketShaper multiple buffer overflow
Buffer overflow in Web and command line interfaces...
Packeteer PacketWise CLI overflow DoS
Product: Packeteer PacketShaper Model: 9500/ISP Software: PacketWise 8.x possibly others =========== Background =========== Packeteer creates bandwidth management solutions such as the PacketShaper which "is the ultimate scalable platform for optimized WAN application performance—the only...
Packeteer PacketShaper 8.0 - Multiple Buffer Overflow (Denial of Service) (PoC) Vulnerabilities
Packeteer PacketShaper 8.0 - Multiple Buffer Overflow Denial of Service PoC Vulnerabilities source: https://www.securityfocus.com/bid/21933/info Packeteer PacketShaper is prone to multiple denial-of-service vulnerabilities. A remote attacker may exploit these issues to cause the device to crash,...
Packeteer PacketShaper 8.0 - Multiple Buffer Overflow (Denial of Service) (PoC) Vulnerabilities
source: https://www.securityfocus.com/bid/21933/info Packeteer PacketShaper is prone to multiple denial-of-service vulnerabilities. A remote attacker may exploit these issues to cause the device to crash, denying further service to legitimate users. Packeteer PacketShaper Version 8.0 is vulnerabl...