Route-Injection Attacks Redirect Internet Traffic

Attackers are accessing routers running on the border gateway protocol BGP and injecting additional hops that redirect large blocks of Internet traffic to locations where it can be monitored and even manipulated before being sent to its intended destination. Internet intelligence company Renesys...

CVE-2013-6817

Heap-based buffer overflow in SAP Network Interface Router SAProuter 7.30 allows remote attackers to cause a denial of service and execute arbitrary code via crafted NI Route messages...

PT-2013-6127

Name of the Vulnerable Software and Affected Versions SAP Network Interface Router SAProuter version 7.30 Description A heap-based buffer overflow issue allows remote attackers to cause a denial of service and execute arbitrary code via crafted NI Route messages. Recommendations For SAP Network...

PT-2013-5626

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.9 through 3.9.2S Description The issue allows remote attackers to cause a denial of service by sending many PPTP packets over NAT. Successful exploitation could trigger a reload of the embedded services processors card ...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability

Cisco IOS XR Software Releases 3.3.0 to 4.2.0 contain a vulnerability when handling fragmented packets that could result in a denial of service DoS condition of the Cisco CRS Route Processor cards listed in the "Affected Products" section of this advisory. The vulnerability is due to improper...

PT-2013-5630

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.8.1 through 4.2.0 Cisco IOS XR Software Releases 3.3.0 to 4.2.0 Description The issue is related to the improper processing of fragmented packets within certain route-processor components, which can cause a denial of...

CVE-2013-4125

The fib6addrt2node function in net/ipv6/ip6fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement RA messages in certain circumstances involving three routes that initially qualified for membership in an ECMP route set until a change occurred for...

UBUNTU-CVE-2013-4125

The fib6addrt2node function in net/ipv6/ip6fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement RA messages in certain circumstances involving three routes that initially qualified for membership in an ECMP route set until a change occurred for...

Oracle Linux 5 : kernel (ELSA-2010-0046)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0046 advisory. - firewire ohci: handle receive packets with zero data Jay Fenlason 547241 547242 CVE-2009-4138 - fs respect flag in docoredump Danny Feng 544188 54418...

CVE-2013-1136

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

Design/Logic Flaw

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

CVE-2013-1136

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

CVE-2013-1136

The CVE-2013-1136 entry describes a local denial-of-service vulnerability in Cisco IOS on the Aggregation Services Router (ASR) Route Processor 2 where improper memory management of the crypto engine allows a local attacker to crash the route processor by creating multiple tunnels and then inspec...

CVE-2013-1136: Undefined Security Weakness

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

Route Parameter Injection Via Query String in Zend\Mvc

More info at https://framework.zend.com/security/advisory/ZF2013-01...

PT-2013-1583

Name of the Vulnerable Software and Affected Versions HP Access Controller versions affected versions not specified HP Fabric Module versions affected versions not specified HP Firewall versions affected versions not specified HP Router versions affected versions not specified HP Switch versions...

FreeSWITCH Route Header Value Handling DoS

According to its self-reported version, the remote FreeSWITCH install is affected by a denial of service vulnerability in the Sofia SIP stack. A remote attacker can exploit this, via a specially crafted INVITE request with a 'Route' value containing a long list, to crash the service. %NASLMINLEVE...

CVE-2012-5316

Multiple cross-site scripting XSS vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 Troubleshooting in the Trace route Device module or 2 LDAP Username in the LDAP Configuration modul...

CVE-2012-5316: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 Troubleshooting in the Trace route Device module or 2 LDAP Username in the LDAP Configuration modul...

PT-2012-5915

Name of the Vulnerable Software and Affected Versions Barracuda Spam & Virus Firewall 600 Firmware versions 4.0.1.009 and earlier Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the Troubleshooting in the Trace route Device module or the LDAP...