Cisco IOS vulnerable to DoS via unrecognized transitive attribute in BGP UPDATE

Overview There is a denial-of-service vulnerability in several specific but common configurations of Cisco IOS. Description There is a problem involving BGP updates on Cisco routers with BGP4 Prefix Filtering and Inbound Route Maps enabled. A route update with an unrecognized transitive attribute...

Переполнение буфера в старых версиях route

Переполнение буфера при разборе аргумента в route add...

[EXPL] Route (/sbin/route) exploit has been released (add parameter)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com Route /sbin/route exploit has been released add parameter ------------------------------------------------------------------------ SUMMARY A security...

CVE-1999-0875

Technical details (affected products/versions, exploitation, or mitigations) for CVE-1999-0875 are not provided in the supplied documents. Monitor for updates and additional disclosures.

CVE-1999-0909

CVE-1999-0909 affects multihomed Windows systems. The vulnerability allows a remote attacker to bypass IP source routing restrictions by sending a malformed IP options packet, named the “Spoofed Route Pointer.” The connected Red Hat and CVE listings reference the same description. No explicit pro...

CVE-1999-0986

The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R record route option...

CVE-1999-0909

Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability...

CVE-1999-0986

The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R record route option...

CVE-1999-0909

Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability...

Microsoft Windows 98a98b98SE Solaris 2.6 - IRDP

Microsoft Windows 98a98b98SE Solaris 2.6 - IRDP source: https://www.securityfocus.com/bid/578/info This discussion is verbatim from the LHI Advisory referenced in the "Reference Section" of this vulnerability entry with very few changes The ICMP Router Discovery Protocol IRDP comes enabled by...

CVE-1999-1306

Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which could allow attackers to bypass filters...

CVE-2026-45065: UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection

More info at https://symfony.com/cve-2026-45065...

CVE-2026-45065: UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection

More info at https://symfony.com/cve-2026-45065...

CVE-2026-48784: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization

More info at https://symfony.com/cve-2026-48784...