4845 matches found
Record Route
It is possible to obtain the traceroute to the remote host by sending packets with the 'Record Route' option set. It is a complement to traceroute. C Tenable Network Security, Inc. References: RFC 792 Internet Control Message Protocol RFC 791 Internet Protocol include"compat.inc"; ifdescription...
DSA-442 linux-kernel-2.4.17-s390 - several vulnerabilities
Bulletin has no description...
CVE-2003-0244
The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service CPU consumption via packets with forged source addresses that cause a large number of hash table collisions...
CVE-2001-0757
Cisco 6400 Access Concentrator Node Route Processor 2 NRP2 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet...
CVE-2001-0650
CVE-2001-0650 affects Cisco IOS 12.0 and earlier. A BGP UPDATE containing an unrecognized transitive attribute can cause memory corruption, leading to router crashes or bad route updates, potentially disrupting networks. Cisco’s advisory states this is caused by BGP attribute processing in config...
CVE-2001-0752
Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST ping with the IP Record Route option set...
CVE-2000-0568
Sybergen Secure Desktop 2.1 is affected by CVE-2000-0568 due to improper protection against ICMP Type 9 false router advertisements, allowing remote attackers to modify default routes. The available sources document the product and impact but do not provide specific exploit code, affected version...
CVE-1999-1216
Cisco routers (9.17 and earlier) are affected by CVE-1999-1216 via improper handling of IP source routed packets. The underlying issue allows remote attackers to bypass security restrictions by sending source-routed traffic that should be denied with the no ip source-route command. This is a netw...
CVE-1999-1216
Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using the "no ip source-route" command...
CVE-1999-1466
The CVE-1999-1466 entry concerns Cisco routers (versions 8.2–9.1) where remote attackers can bypass ACLs when extended IP access lists are configured on certain interfaces with the IP route cache enabled and the access list uses the established keyword. The provided sources confirm the vulnerabil...
CVE-1999-1466
Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certain interfaces, the IP route cache is enabled, and the access list uses the "established" keyword...
Cisco IOS vulnerable to DoS via unrecognized transitive attribute in BGP UPDATE
Overview There is a denial-of-service vulnerability in several specific but common configurations of Cisco IOS. Description There is a problem involving BGP updates on Cisco routers with BGP4 Prefix Filtering and Inbound Route Maps enabled. A route update with an unrecognized transitive attribute...
Переполнение буфера в старых версиях route
Переполнение буфера при разборе аргумента в route add...
[EXPL] Route (/sbin/route) exploit has been released (add parameter)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com Route /sbin/route exploit has been released add parameter ------------------------------------------------------------------------ SUMMARY A security...
CVE-1999-0875
Technical details (affected products/versions, exploitation, or mitigations) for CVE-1999-0875 are not provided in the supplied documents. Monitor for updates and additional disclosures.
CVE-1999-0909
CVE-1999-0909 affects multihomed Windows systems. The vulnerability allows a remote attacker to bypass IP source routing restrictions by sending a malformed IP options packet, named the “Spoofed Route Pointer.” The connected Red Hat and CVE listings reference the same description. No explicit pro...
CVE-1999-0986
The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R record route option...
CVE-1999-0909
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability...