CVE-2001-1549

The CVE-2001-1549 entry affects Tiny Personal Firewall versions 1.0 and 2.0. The vulnerability permits local users to bypass filtering by sending non-standard TCP packets created with non-Windows protocol adapters, indicating a local-privilege or local-bypass risk depending on the deployment. The...

CVE-2001-1548

ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters...

CVE-2001-1548

CVE-2001-1548 affects ZoneAlarm versions 2.1–2.6 and ZoneAlarm Pro 2.4–2.6. The root cause is bypass of filtering by local users through non-standard TCP packets crafted with non-Windows protocol adapters, enabling potential evasion of security controls. The public records describe the vulnerabil...

FreeBSD-SA-05:15.tcp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:15.tcp Security Advisory The FreeBSD Project Topic: TCP connection stall denial of service Category: core Module: inet Announced: 2005-06-29 Credits: Noritoshi...

CVE-2004-2095

Honeyd prior to 0.8 is vulnerable: it answers TCP packets with SYN and RST flags, enabling remote attackers to identify which IP addresses Honeyd is simulating. The vulnerability is documented across CVE-2004-2095 records (NVD/CVE List) and related feeds, but the provided documents do not specify...

CVE-2004-2095

Honeyd before 0.8 replies to TCP packets with the SYN and RST flags set, which allows remote attackers to identify IP addresses that are being simulated by Honeyd...

TCP TIMESTAMPS Denial of Service Exploit

Exploit for multiple platform in category dos / poc ======================================== TCP TIMESTAMPS Denial of Service Exploit ======================================== / TCP does not adequately validate segments before updating timestamp value http://www.kb.cert.org/vuls/id/637934 RFC-1323...

CVE-2005-1517

Unknown vulnerability in Cisco Firewall Services Module FWSM 2.3.1 and earlier, when using URL, FTP, or HTTPS filtering exceptions, allows certain TCP packets to bypass access control lists ACLs...

CVE-2004-1663

Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 formerly FastT 100 and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service freeze and possible data corruption via crafted TCP packets...

CVE-2004-1663

CVE-2004-1663 affects Engenio/LSI Logic storage controllers (used in Storagetek D280, IBM DS4100, Brocade SilkWorm Switches). It allows remote attackers to trigger a denial of service (freeze and possible data corruption) via crafted TCP packets. The documents describe the vulnerability and affec...

CVE-2004-2095

Honeyd before 0.8 replies to TCP packets with the SYN and RST flags set, which allows remote attackers to identify IP addresses that are being simulated by Honeyd...

Snort 2.1/2.2 - DecodeTCPOptions Remote Denial of Service (1)

// source: https://www.securityfocus.com/bid/12084/info Snort is reported prone to a remote denial of service vulnerability. The vulnerability is reported to exist in the DecodeTCPOptions function of 'decode.c', and is as a result of a failure to sufficiently handle malicious TCP packets. A remot...

Snort 2.12.2 - DecodeTCPOptions Remote Denial of Service (2)

Snort 2.12.2 - DecodeTCPOptions Remote Denial of Service 2 // source: https://www.securityfocus.com/bid/12084/info Snort is reported prone to a remote denial of service vulnerability. The vulnerability is reported to exist in the DecodeTCPOptions function of 'decode.c', and is as a result of a...

Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (4)

// source: https://www.securityfocus.com/bid/11258/info Multiple vendor implementations of the TCP stack are reported prone to a remote denial-of-service vulnerability. The issue is reported to present itself due to inefficiencies present when handling fragmented TCP packets. The discoverer of th...

Denial of service in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption)

This is a modified advisory about the specific Brocade case. Product : all Brocade fiber channel switches running pre-3.2 code including Silkworm 3800, Silkworm 3200 and Silkworm 2800. Vuln. : Remotely exploitable denial of service Date : 09/05/2004 Author : Frank Denis [email protected], tested by...

Engenio/LSI Logic Storage controllers DoS

Malcrafted TCP packet cause device to crash...

Engenio/LSI Logic controllers denial of service/data corruption

Product : Engenio/LSI Logic storage controllers, including: - Storagetek D280 verified, - IBM FastT 100 verified, - Probably all other Storagetek and IBM FastT storage controllers since the software part is almost identical, - Maybe some SGI and Teradata storage controllers unverified, - Some...

CVE-2004-1663

Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 formerly FastT 100 and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service freeze and possible data corruption via crafted TCP packets...

CVE-2002-1104

Cisco Virtual Private Network VPN Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service crash via TCP packets with source and destination ports of 137 NETBIOS...

CVE-2004-0171

The CVE-2004-0171 issue affects FreeBSD 5.1 and earlier and Mac OS X before 10.3.4. It stems from the TCP reassembly queue not limiting the number of out-of-sequence segments, allowing remote attackers to exhaust memory mbufs and crash the system (denial of service) by sending a flood of out-of-s...