How could an attacker use the“IP address spoofing” break through the firewall system? (Figure)-vulnerability warning-the black bar safety net

General access control is mainly in the firewall settings, develop a security policy: e.g. internal LAN resources do not allow external Internet users to use; not fortified areaknown as the demilitarized zonecan be for internal or external local area network, wherein the resource allows the...

EGP detection

The remote IP stack answers to an obsolete protocol. Description : The remote host is running EGP, an obsolete routing protocol. If possible, this IP protocol should be disabled. OpenVAS Vulnerability Test $Id: egpdetect.nasl 6063 2017-05-03 09:03:05Z teissa $ Description: EGP detection Authors:...

[Full-disclosure] ELSA Lancom Router Discloses the Administrator Password to Remote Users

It is reported that the default configuration allows a remote user to connect to the router via port 80 with a web browser and obtain the remote access password, which is apparently stored in clear text. The remote user can also change the router's configuration and can remotely upgrade the...

CVE-2002-2053

The design of the Hot Standby Routing Protocol HSRP, as implemented on Cisco IOS 12.1, when using IRPAS, allows remote attackers to cause a denial of service CPU consumption via a router with the same IP address as the interface on which HSRP is running, which causes a loop...

Cisco IOS Secure Shell Server TACACS+ Multiple DoS (CSCed65778, CSCed65285)

The remote version of IOS has the ability to enable an SSH server to let the administrators connect to the remote device. There is an implementation flaw in the remote version of this software which may allow an attacker to cause a resource starvation on the remote device, thus preventing it from...

RIP (CVE-1999-0111)

...

CVE-2004-0467

Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service routing disabled via a large number of MPLS packets, which are not filtered or verified before being sent to the Routing Engine, which reduces the speed at which other packets are processed...

Default Password (zebra) for Zebra

The remote host is running Zebra, a routing daemon. The remote Zebra installation uses as its password the default, 'zebra'. An attacker may log in using this password and control the routing tables of the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2004-0467

Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service routing disabled via a large number of MPLS packets, which are not filtered or verified before being sent to the Routing Engine, which reduces the speed at which other packets are processed...

Description of the critical update for Windows Firewall "My Network (subnet) only" scoping in Windows XP Service Pack 2

Description of the critical update for Windows Firewall "My Network subnet only" scoping in Windows XP Service Pack 2 Article ID : 886185 Last Review : December 18, 2004 Revision : 2.0 On this Page SUMMARY SYMPTOMS CAUSE RESOLUTION MORE INFORMATION SUMMARY This article describes Critical Update f...

Debian DSA-097-1 : exim - Uncontrolled program execution

Patrice Fournier discovered a bug in all versions of Exim older than Exim 3.34 and Exim 3.952. The Exim maintainer, Philip Hazel, writes about this issue: 'The problem exists only in the case of a run time configuration which directs or routes an address to a pipe transport without checking the...

CVE-2001-0741

Cisco Hot Standby Routing Protocol HSRP allows local attackers to cause a denial of service by spoofing HSRP packets...

BGP Routing Protocol Open Message Detection

Binary data 1196.prm...

Zebra Routing Software Detection

Binary data 1177.prm...

CVE-2004-0674

Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service crash via a packet with the IP record route option set...

CVE-2004-0589

Cisco IOS 11.1x through 11.3x and 12.0x through 12.2x, when configured for BGP routing, allows remote attackers to cause a denial of service device reload via malformed BGP 1 OPEN or 2 UPDATE messages...

CVE-2004-0125

The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table...

Direct Connect Hub Detection

A Direct Connect 'hub' or server is running on this port. Direct Connect is a protocol used for peer-to-peer file-sharing as well as chat, and a hub routes communications among peers. While any type of file may be shared, Direct Connect hubs often handle movies, images, music files, and games,...

Fedora Core 1 : kernel-2.4.22-1.2129.nptl (2003-026)

The kernel shipped with Fedora Core 1 was vulnerable to a bug in the error return on a concurrent fork with threaded exit which could be exploited by a user level program to crash the kernel. In addition to this bug fix, the changelog below details various other non-security fixes that have been...

CVE-2004-1749

Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service CPU consumption via a large number of HTTP requests...