DNS BailiWicked Host Attack

No description provided by source. /msf3/msfconsole require 'msf/core' require 'net/dns' require 'scruby' require 'resolv' module Msf class Auxiliary::Spoof::Dns::BailiWickedHost Msf::Auxiliary include Exploit::Remote::Ip def initializeinfo = superupdateinfoinfo, 'Name' = 'DNS BailiWicked Host...

Snort碎片重组TTL值导致漏报漏洞

BUGTRAQ ID: 29327 CVECAN ID: CVE-2008-1804 Snort是广泛部署的开放源码网络入侵检测系统（IDS）。 Snort没有正确地重组IP报文，远程攻击者可能利用此漏洞绕过检测。 在接收入站碎片时，Snort检查碎片的存活时间（TTL）值并与初始碎片的TTL做比较。如果二者之间的差异大于所配置的量（默认最大值为5）的话，就会丢弃碎片，也无法对其应用规则，这导致Snort无法过滤或检查有效的通讯。 Snort Project Snort 2.8 Snort Project Snort 2.6 临时解决方法：...

CVE-2008-1804

preprocessors/sppfrag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using a different TTL for each fragment...

CVE-2008-1804

preprocessors/sppfrag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using a different TTL for each fragment...

CVE-2008-1804

CVE-2008-1804 targets Sourcefire Snort up to version 2.8.0: the preprocessor spp_frag3.c fails to correctly identify packet fragments with dissimilar TTL values, enabling a remote attacker to bypass detection rules by using different TTLs on each fragment. The issue is tied to Snort’s fragment-ha...

CVE-2008-1804

Removed by vendor...

snort IDS protection bypass

Packet's fragments with significant TTL difference are ignored...

CVE-2008-1804: Undefined Security Weakness

preprocessors/sppfrag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using a different TTL for each fragment...

Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability Advisory ID: cisco-sa-20080123-asa http://www.cisco.com/warp/public/707/cisco-sa-20080123-asa.shtml Revision 1.0 For Public Release 2008 January 23 1600 UTC GMT...

Cisco PIX / Adaptive Security Appliance DoS

Crash on TTL processing if decrement-ttl enabled...

CVE-2008-0028: Undefined Security Weakness

Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance ASA before 7.236 and 8.03, when the Time-to-Live TTL decrement feature is enabled, allows remote attackers to cause a denial of service device reload via a crafted IP packet...

PT-2008-1691 · Cisco · Cisco 5500 Series Adaptive Security Appliance +2

Name of the Vulnerable Software and Affected Versions: Cisco PIX 500 Series Security Appliance versions prior to 7.236 Cisco 5500 Series Adaptive Security Appliance ASA versions prior to 8.03 Description: The issue allows remote attackers to cause a denial of service, resulting in a device reload...

DEBIAN-CVE-2006-4252

PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service resource exhaustion and application crash via a CNAME record with a zero TTL, which triggers an infinite loop...

CVE-2006-4252

PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service resource exhaustion and application crash via a CNAME record with a zero TTL, which triggers an infinite loop...

CVE-2006-4252

PowerDNS Recursor (3.1.3 and earlier) is affected by CVE-2006-4252: processing a CNAME record with a zero TTL can trigger an infinite loop, causing resource exhaustion and an application crash (denial of service). Affected software is the PowerDNS Recursor; remediation is to upgrade to 3.1.4 or l...

CVE-2006-4252

PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service resource exhaustion and application crash via a CNAME record with a zero TTL, which triggers an infinite loop...

CVE-2006-4252: Undefined Security Weakness

PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service resource exhaustion and application crash via a CNAME record with a zero TTL, which triggers an infinite loop...

Cisco PIX TCP connection DoS

Packets from the same hosts are blocked for few minutes if packet with invalid checksum, or with 1 byte data or of predefined TTL is received...

CVE-2005-3774: Undefined Security Weakness

Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service blocked new connections via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including 1 SYN packets with invalid checksums, which d...

DEBIAN-CVE-2005-2317

Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLISTTTL is greater than 0 or MACLISTDISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies...