CVE-2005-1192

Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060...

CVE-2005-1192: Undefined Security Weakness

Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060...

CVE-2001-0323: Undefined Security Weakness

The ICMP path MTU PMTU discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing "ICMP Fragmentation needed but Don't Fragment DF set" packets between two target hosts, which could cause one host to lower its MTU when transmitting to the other host...

Re: ICMP fragmentation required but DF set problems.

This is a valid method, and known, to slow down a link between two hosts. In my paper "ICMP Usage In Scanning" currently version 2.5 Appendix B: ICMP "Fragmentation Needed but the Don't Fragment Bit was set" and the Path MTU Discovery Process Page 132, I have outlined what should be done accordin...

CVE-2000-0095

The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier...

CVE-2000-0095

CVE-2000-0095 concerns the PMTU discovery procedure in HP-UX 10.30 and 11.00, which, according to the documentation, generates large amounts of traffic in response to small packets. This behavior can be leveraged by a remote attacker to use the affected system as a packet amplifier. The connected...

CVE-2000-0095: Undefined Security Weakness

The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier...

CVE-2000-0095

The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier...