CVE-2008-1147

CVE-2008-1147 describes a weakness in a PRNG that uses XOR and 2-bit random hops (Algorithm X2) used in OpenBSD 2.6–3.4, macOS 10–10.5.1, FreeBSD 4.4–7.0, and DragonFlyBSD 1.0–1.10.1. The vulnerability allows remote attackers to infer sensitive values such as IP fragmentation IDs by observing a s...

CVE-2008-1148

CVE-2008-1148 concerns a flaw in a PRNG using ADD with 0 random hops (Algorithm A0) that affects OpenBSD 3.5–4.2 and NetBSD 1.6.2–4.0. Attackers can observe a sequence of previously generated values to guess sensitive identifiers such as DNS transaction IDs and IP fragmentation IDs, enabling pote...

CVE-2008-1148

A certain pseudo-random number generator PRNG algorithm that uses ADD with 0 random hops aka "Algorithm A0", as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as 1 DNS transaction IDs or 2 IP fragmentation IDs by observing a...

Information disclosure

The tcprespond function in netinet/tcpsubr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service panic via crafted TCP packets. NOTE: some of these details are obtained from third party information...

CVE-2008-1058

The tcprespond function in netinet/tcpsubr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service panic via crafted TCP packets. NOTE: some of these details are obtained from third party information...

CVE-2008-1058

The tcprespond function in netinet/tcpsubr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service panic via crafted TCP packets. NOTE: some of these details are obtained from third party information...

CVE-2008-1058: Undefined Security Weakness

The tcprespond function in netinet/tcpsubr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service panic via crafted TCP packets. NOTE: some of these details are obtained from third party information...

Ubuntu 6.10 / 7.04 / 7.10 : linux-source-2.6.17/20/22 vulnerabilities (USN-574-1)

The minix filesystem did not properly validate certain filesystem values. If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service. This was only vulnerable in Ubun...

CVE-2003-1493

Memory leak in HP OpenView Network Node Manager NNM 6.2 and 6.4 allows remote attackers to cause a denial of service memory exhaustion via crafted TCP packets...

CVE-2003-1493

CVE-2003-1493 affects HP OpenView Network Node Manager (NNM) versions 6.2 and 6.4. The issue is a memory leak in NNM that can be triggered by crafted TCP packets, leading to a denial of service via memory exhaustion. Exploitation status, affected platforms beyond 6.2/6.4, and a vendor patch/fix a...

CVE-2003-1493: Undefined Security Weakness

Memory leak in HP OpenView Network Node Manager NNM 6.2 and 6.4 allows remote attackers to cause a denial of service memory exhaustion via crafted TCP packets...

Code injection

Cisco Content Switching Modules CSM 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.2a, allow remote attackers to cause a denial of service CPU consumption or reboot via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478...

CVE-2007-4788

Cisco Content Switching Modules CSM 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.2a, allow remote attackers to cause a denial of service CPU consumption or reboot via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478...

CVE-2007-4788

CVE-2007-4788 affects Cisco Content Switching Modules (CSM) 4.2 prior to 4.2.3a and Cisco Content Switching Module with SSL (CSM-S) 2.1 prior to 2.1.2a. The vulnerability allows remote attackers to cause a denial of service through sets of out-of-order TCP packets with unspecified characteristics...

CVE-2007-4788

Cisco Content Switching Modules CSM 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.2a, allow remote attackers to cause a denial of service CPU consumption or reboot via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478...

CVE-2007-4788: Undefined Security Weakness

Cisco Content Switching Modules CSM 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.2a, allow remote attackers to cause a denial of service CPU consumption or reboot via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478...

CVE-2007-3026

Integer overflow in Panda Software AdminSecure allows remote attackers to execute arbitrary code via crafted packets with modified length values to TCP ports 19226 or 19227, resulting in a heap-based buffer overflow...

CVE-2007-1173

Multiple buffer overflows in the CentennialIPTransferServer service XFERWAN.EXE, as used by 1 Centennial Discovery 2006 Feature Pack 1, 2 Numara Asset Manager 8.0, and 3 Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet...

Code injection

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service device reboot via malformed TCP packets...

CVE-2007-0959: Undefined Security Weakness

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service device reboot via malformed TCP packets...