security flaw

Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets...

CVE-2005-3774

CVE-2005-3774 affects Cisco PIX firewall versions 6.3 and 7.0. Remote attackers can cause a denial of service by sending spoofed TCP packets that generate embryonic connections that never complete. Details include (1) SYN packets with invalid checksums, (2) one byte of meaningless data, or (3) a ...

CA Multiple Products Message Queuing Multiple Remote Vulnerabilities

The remote version of CA Message Queuing Service contains a stack overflow in the 'logsecurity' function that may allow an attacker to execute arbitrary code on the remote host. This version is also prone to denial of service on the TCP port 4105 as well as arbitrary code execution through spoofe...

CVE-2005-3272

Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets...

CVE-2005-3272

Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets...

CVE-2005-3272

Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets...

Checkpoint VPN-1 DoS

Flood with specific spoofed packets from local network causes firewall to hang...

CVE-2005-2669

Computer Associates CA Message Queuing CAM / CAFT 1.05, 1.07 before Build 22013, and 1.11 before Build 2913 allows remote attackers to execute arbitrary commands via spoofed CAFT packets...

TCP TIMESTAMPS Denial of Service Exploit

No description provided by source. / TCP does not adequately validate segments before updating timestamp value http://www.kb.cert.org/vuls/id/637934 RFC-1323 TCP Extensions for High Performance 4.2.1 defines how the PAWS algorithm should drop packets with invalid timestamp options: R1 If there is...

TCP TIMESTAMPS - Denial of Service

/ TCP does not adequately validate segments before updating timestamp value http://www.kb.cert.org/vuls/id/637934 RFC-1323 TCP Extensions for High Performance 4.2.1 defines how the PAWS algorithm should drop packets with invalid timestamp options: R1 If there is a Timestamps option in the arrivin...

CVE-2004-1799

CVE-2004-1799 describes a vulnerability in PF (packet filter) on certain OpenBSD versions where, when stateful filtering is enabled, packets for a session are not limited to the original interface. This allows a remote attacker to bypass intended packet filters by sending spoofed packets to other...

Tcpdump 3.8.x - ldp_print Infinite Loop Denial of Service

Tcpdump 3.8.x - ldpprint Infinite Loop Denial of Service / tcpdump3.8.x: LDP ldpprint infinite loop DOS. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xtcpdump-ldp-dos.c -o xtcpdump-ldp-dos tcpdump homepage/URL: http://www.tcpdump.org fix: this appears to have been fixed in the alph...

Microsoft Windows TCP/IP stack multiple vulnerabilities

Memory corruption on IP packets handling, TCP connection reset with spoofed TCP and ICMP packets, a varinat of LAND attack...

squid -- denial of service with forged WCCP messages

The squid patches page notes: WCCPISEEYOU messages contain a 'number of caches' field which should be between 1 and 32. Values outside that range may crash Squid if WCCP is enabled, and if an attacker can spoof UDP packets with the WCCP router's IP address...

CVE-2004-1799

PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces...

TCP/IP Sequence Prediction Blind Reset Spoofing DoS

The remote host is affected by a sequence number approximation vulnerability that allows an attacker to send spoofed RST packets to the remote host and close established connections. This may cause problems for some dedicated services BGP, a VPN over TCP, etc. C Tenable Network Security, Inc...

CVE-2003-1527

BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets...

Microsoft Windows 98 - Fragmented UDP Flood Denial of Service

Microsoft Windows 98 - Fragmented UDP Flood Denial of Service // source: https://www.securityfocus.com/bid/8543/info A remote denial of service vulnerability has been reported to affect Microsoft Windows 98. It is reportedly possible to reproduce this condition by sending a fragmented flood of...

Microsoft Windows 98 - Fragmented UDP Flood Denial of Service

// source: https://www.securityfocus.com/bid/8543/info A remote denial of service vulnerability has been reported to affect Microsoft Windows 98. It is reportedly possible to reproduce this condition by sending a fragmented flood of spoofed UDP packets to a vulnerable system. This will reportedly...

802.11b DoS exploit

While working to develop code for WIDZ that is equivalent to a standard Intrusion Detection system’s RESET or SHUN functionality, an effective 802.11b disruption of service attack has been discovered. I haven’t spotted any other postings so here we go…. FATA-jack - a modified version of the...