194 matches found
DEBIAN-CVE-2009-1086
Heap-based buffer overflow in the ldnsrrnewfrmstrinternal function in ldns 1.4.x allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a DNS resource record RR with a long 1 class field clas variable and possibly 2 TTL field...
CVE-2009-1086
Heap-based buffer overflow in the ldnsrrnewfrmstrinternal function in ldns 1.4.x allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a DNS resource record RR with a long 1 class field clas variable and possibly 2 TTL field...
CVE-2009-1086
Heap-based buffer overflow in the ldnsrrnewfrmstrinternal function in ldns 1.4.x allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a DNS resource record RR with a long 1 class field clas variable and possibly 2 TTL field...
Checkpoint VPN-1 PAT信息泄露漏洞
CVECAN ID: CVE-2008-5849 CheckPoint防火墙/VPN解决方案可为组织提供网络架构和信息安全保护。 对于启用了端口地址翻译（PAT）的CheckPoint VPN-1防火墙，如果远程攻击者向防火墙的18264/tcp端口发送设置有很低TTL值的报文的话，就可以触发ICMPTIMXCEEDINTRANS响应，而响应的封装IP报文中包含有内部IP地址，如下所示： 14:56:25.169480 IP tos 0xe0, ttl 255, id 21407, offset 0, flags none, proto: ICMP 1, length: 68...
Checkpoint VPN-1 PAT information disclosure
Checkpoint VPN-1 PAT information disclosure By sending crafted packets to ports on the firewall which are mapped by port address translation PAT to ports on internal devices, information about the internal network may be disclosed in the resulting ICMP error packets. Port 18264/tcp on the firewal...
DNS BailiWicked Host Attack
No description provided by source. /msf3/msfconsole require 'msf/core' require 'net/dns' require 'scruby' require 'resolv' module Msf class Auxiliary::Spoof::Dns::BailiWickedHost Msf::Auxiliary include Exploit::Remote::Ip def initializeinfo = superupdateinfoinfo, 'Name' = 'DNS BailiWicked Host...
Snort碎片重组TTL值导致漏报漏洞
BUGTRAQ ID: 29327 CVECAN ID: CVE-2008-1804 Snort是广泛部署的开放源码网络入侵检测系统（IDS）。 Snort没有正确地重组IP报文，远程攻击者可能利用此漏洞绕过检测。 在接收入站碎片时，Snort检查碎片的存活时间（TTL）值并与初始碎片的TTL做比较。如果二者之间的差异大于所配置的量（默认最大值为5）的话，就会丢弃碎片，也无法对其应用规则，这导致Snort无法过滤或检查有效的通讯。 Snort Project Snort 2.8 Snort Project Snort 2.6 临时解决方法：...
CVE-2008-1804
preprocessors/sppfrag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using a different TTL for each fragment...
CVE-2008-1804
CVE-2008-1804 targets Sourcefire Snort up to version 2.8.0: the preprocessor spp_frag3.c fails to correctly identify packet fragments with dissimilar TTL values, enabling a remote attacker to bypass detection rules by using different TTLs on each fragment. The issue is tied to Snort’s fragment-ha...
CVE-2008-1804
preprocessors/sppfrag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using a different TTL for each fragment...
CVE-2008-1804
Removed by vendor...
snort IDS protection bypass
Packet's fragments with significant TTL difference are ignored...
Cisco PIX / Adaptive Security Appliance DoS
Crash on TTL processing if decrement-ttl enabled...
Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability Advisory ID: cisco-sa-20080123-asa http://www.cisco.com/warp/public/707/cisco-sa-20080123-asa.shtml Revision 1.0 For Public Release 2008 January 23 1600 UTC GMT...
PT-2008-1691 · Cisco · Cisco 5500 Series Adaptive Security Appliance +2
Name of the Vulnerable Software and Affected Versions: Cisco PIX 500 Series Security Appliance versions prior to 7.236 Cisco 5500 Series Adaptive Security Appliance ASA versions prior to 8.03 Description: The issue allows remote attackers to cause a denial of service, resulting in a device reload...
DEBIAN-CVE-2006-4252
PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service resource exhaustion and application crash via a CNAME record with a zero TTL, which triggers an infinite loop...
CVE-2006-4252
PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service resource exhaustion and application crash via a CNAME record with a zero TTL, which triggers an infinite loop...
CVE-2006-4252
PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service resource exhaustion and application crash via a CNAME record with a zero TTL, which triggers an infinite loop...
CVE-2006-4252
PowerDNS Recursor (3.1.3 and earlier) is affected by CVE-2006-4252: processing a CNAME record with a zero TTL can trigger an infinite loop, causing resource exhaustion and an application crash (denial of service). Affected software is the PowerDNS Recursor; remediation is to upgrade to 3.1.4 or l...