Packet Filter Null Pointer Dereference

/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-30 Found : 2009-04-09 Affected Software: PF OpenBSD Packet Filter Affected OS ...

Multiple Vendor PF Null Pointer Dereference Vulnerability

No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-30 Found : 2009-04-09 Affected Software: PF...

OpenBSD 4.5 Denial Of Service

/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affected OS : OpenBSD 4.3,4,5,...

OpenBSD 4.5 - IP datagrams Remote Denial of Service

/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affected OS : OpenBSD 4.3,4,5,...

OpenBSD 4.3 up to OpenBSD-current: PF null pointer dereference - remote DoS (kernel panic)

/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affected OS : OpenBSD 4.3,4,5,...

FreeBSD Security Advisory (FreeBSD-SA-06:07.pf.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:07.pf.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Intel CORE 2处理器多个本地拒绝服务漏洞

Intel CORE 2是非常流行的双核处理器。 CORE 2处理器中存在多个拒绝服务漏洞： 如果温度达到了无效的温度，则即使已经超过了设置的阀值，CPU仍不会生成Thermal中断； 在执行一系列REP存储指令期间，存储可能会在完成指令之前便试图分派内存，导致处理器锁定和/或系统挂起； 如果一个逻辑处理器写入非脏页面（dirty page），另一个逻辑处理器写入相同的非脏页面或在相关的页面表项中明确的设置脏位，则内部处理器行为的复杂交互会导致不可预测的系统行为并挂起； 如果从Core 1请求数据导致L1缓存丢失，就会将请求发送给L2缓存。如果这个请求遇到了Core...

real-dos.txt

!/usr/bin/python Real player 10 Gold .Ra file remote Dos. Credits to n00b for finding this bug This bug is a nasty memory leak with in Real player 10 gold please remember if your guna test it out save all your info you need first..Coz your probly guna have to reboot also remember all other...

OpenBSD PF IP分片拒绝服务漏洞

BUGTRAQ ID: 16375 CVECAN ID: CVE-2006-0381 OpenBSD是一款开放源代码Unix类操作系统。 OpenBSD内核的报文分片处理模块存在漏洞，远程攻击者可利用此漏洞对服务器进行拒绝服务攻击。 远程攻击者可能通过精心构造的恶意分片报文导致内核崩溃。 FreeBSD FreeBSD 6.0-STABLE FreeBSD FreeBSD 6.0-RELEASE FreeBSD FreeBSD 5.4 FreeBSD FreeBSD 5.3 OpenBSD OpenBSD current OpenBSD OpenBSD 3.8 OpenBSD OpenB...

ypserv -- Inoperative access controls in ypserv

Problem Description There are two documented methods of restricting access to NIS maps through ypserv8: through the use of the /var/yp/securenets file, and through the /etc/hosts.allow file. While both mechanisms are implemented in the server, a change in the build process caused the "securenets"...

CVE-2006-0381

The CVE-2006-0381 entry describes a logic bug in pf's IP fragment cache that can cause a fragment to be inserted twice when using the pf rules scrub fragment crop or scrub fragment drop-ovl. Affected products include FreeBSD 5.3, 5.4, and 6.0, and OpenBSD. The impact is remote denial of service (...

CVE-2006-0381

A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service crash via crafted packets that cause a packet fragment to be...

FreeBSD-SA-06:07.pf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:07.pf Security Advisory The FreeBSD Project Topic: IP fragment handling panic in pf4 Category: contrib Module: syscontrib Announced: 2006-01-25 Credits: Jakob...

[SA18609] FreeBSD "pf" IP Fragment Denial of Service Vulnerability

TITLE: FreeBSD "pf" IP Fragment Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18609 VERIFY ADVISORY: http://secunia.com/advisories/18609/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: FreeBSD 6.x http://secunia.com/product/6778/ FreeBSD 5.x...

pf -- IP fragment handling panic

Problem description: A logic bug in pf's IP fragment cache may result in a packet fragment being inserted twice, violating a kernel invariant. Impact: By sending carefully crafted sequence of IP packet fragments, a remote attacker can cause a system running pf with a ruleset containing a 'scrub...

CVE-2004-1799

PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces...

CVE-2004-1799

CVE-2004-1799 describes a vulnerability in PF (packet filter) on certain OpenBSD versions where, when stateful filtering is enabled, packets for a session are not limited to the original interface. This allows a remote attacker to bypass intended packet filters by sending spoofed packets to other...

OpenBSD 3.x - PF RDR Network Information Leakage

OpenBSD 3.x - PF RDR Network Information Leakage source: https://www.securityfocus.com/bid/8082/info OpenBSD PF is prone to an information leakage vulnerability when configured to redirect incoming traffic from standard ports to high ports. This occurs because PF responds different to packets...

OpenBSD 3.x - PF RDR Network Information Leakage

source: https://www.securityfocus.com/bid/8082/info OpenBSD PF is prone to an information leakage vulnerability when configured to redirect incoming traffic from standard ports to high ports. This occurs because PF responds different to packets destined for active private addresses than to those...

CVE-2002-0514

OpenBSD 3.0 PF with the return-rst rule is vulnerable. The RST packet’s TTL is set to 128, allowing remote attackers to infer whether a port is filtered by comparing TTL to the default. Affected component: PF rule handling in OpenBSD 3.0. Root cause: TTL manipulation in RST responses leads to dis...