Quagga Routing Software Suite 0.9x - RIPd RIPv1 RESPONSE Packet Route Injection

source: https://www.securityfocus.com/bid/17808/info Quagga is susceptible to remote information-disclosure and route-injection vulnerabilities. The application fails to properly ensure that required authentication and protocol configuration options are enforced. These issues allow remote attacke...

Quagga Routing Software Suite 0.9x - RIPd RIPv1 Request Routing Table Disclosure

source: https://www.securityfocus.com/bid/17808/info Quagga is susceptible to remote information-disclosure and route-injection vulnerabilities. The application fails to properly ensure that required authentication and protocol configuration options are enforced. These issues allow remote attacke...

Quagga Routing Software Suite 0.9x - RIPd RIPv1 Request Routing Table Disclosure

Quagga Routing Software Suite 0.9x - RIPd RIPv1 Request Routing Table Disclosure source: https://www.securityfocus.com/bid/17808/info Quagga is susceptible to remote information-disclosure and route-injection vulnerabilities. The application fails to properly ensure that required authentication a...

Quagga Routing Software Suite 0.9x - RIPd RIPv1 RESPONSE Packet Route Injection

Quagga Routing Software Suite 0.9x - RIPd RIPv1 RESPONSE Packet Route Injection source: https://www.securityfocus.com/bid/17808/info Quagga is susceptible to remote information-disclosure and route-injection vulnerabilities. The application fails to properly ensure that required authentication an...

[Full-disclosure] Quagga RIPD unauthenticated route injection

Arhont Ltd - Information Security Advisory by: Konstantin V. Gavrilenko http://www.arhont.com Arhont ref: arh200604-2 Advisory: Quagga RIPD unauthenticated route injection Class: design bug? Version: Tested on Quagga suite v0.98.5 v0.99.3 Gentoo, 2.6.15 Model Specific: Other versions might have t...

Linux kernel ICMP DoS

record-route or timestamp IP options handling vulnerability...

CVE-2006-0454

Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmpsend, does not properly handle when the ipoptionsecho function in icmp.c fails, which allows remote attackers to cause a denial of service crash via vectors such as 1 record-route and 2 timestamp IP options wi...

CVE-2006-0454

Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmpsend, does not properly handle when the ipoptionsecho function in icmp.c fails, which allows remote attackers to cause a denial of service crash via vectors such as 1 record-route and 2 timestamp IP options wi...

Record route

This plugin sends packets with the 'Record Route' option. It is a complement to traceroute. OpenVAS Vulnerability Test $Id: recordroute.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Record route Authors: Michel Arboi Copyright: Copyright C 2004 Michel Arboi This program is free software; y...

Record route

This plugin sends packets with the SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.12264";...

Source Routed Packets

The remote host accepts loose source routed IP packets. The feature was designed for testing purpose. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

security flaw

The rosertioctl function in roseroute.c for Radionet Open Source Environment ROSE in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.4.29, does not properly verify the ndigis argument for a new route, which allows attackers to trigger array out-of-bounds errors with a large number of digipeats...

CVE-2005-1041

The fibseqstart function in fibhash.c in Linux kernel allows local users to cause a denial of service system crash via /proc/net/route...

CVE-2005-1041

The fibseqstart function in fibhash.c in Linux kernel allows local users to cause a denial of service system crash via /proc/net/route...

security flaw

The fibseqstart function in fibhash.c in Linux kernel allows local users to cause a denial of service system crash via /proc/net/route...

CVE-2005-1041

The CVE-2005-1041 issue affects the Linux kernel and is caused by the fib_seq_start() function in fib_hash.c, allowing a local attacker to crash the system via /proc/net/route (Denial of Service). Public advisories confirm affected distributions and provide fixes: Ubuntu USN-131-1 upgrades to ker...

CVE-2005-1041

The fibseqstart function in fibhash.c in Linux kernel allows local users to cause a denial of service system crash via /proc/net/route...

CVE-2004-0674

Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service crash via a packet with the IP record route option set...

Enterasys XSR DoS

Router crashes on packet with RR option...

Enterasys XSR Security Routers DoS

Description: Enterasys XSR Security Routers crash when passing a packet with the option record route. System Vulnerable: This vulnerability was found in XSR-1800 series. firmware 7.0.0.0 Proof-of-concept: I've used Hping http://www.hping.org/ to perform this example: hping3 -1 -G www.uol.com.br...