yersinia

スパニングツリー 1: conf BPDUを送信するDoS攻撃 root@kitploit: conf BPDUを連続的に送信し、自分がルートであると主張します!!! ルートパスコスト0、ランダム生成されたブリッジID（したがって同じルートID）、およびその他のフィールドのデフォルト値を持つconf BPDUを継続的に送信することで、近くのスイッチを悩ませ、STPエンジンの解析と再計算を強制してDoSを引き起こそうとします。 送信元MAC: ランダム生成 宛先MAC: 01:80:c2:00:00:00 ブリッジID: 8000:送信元MAC ルートID: 8000:送信元MAC...

yersinia

Spanning Tree 1: DOS attack sending conf BPDUs root@kitploit: Let's send some conf BPDUs claiming be root!!! By sending continously conf BPDU with root pathcost 0, randomly generated bridge id and therefore the same root id, and some default values for other fields, we try to annoy the switches...

RE: DoS code for Cisco VLAN Trunking Protocol Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is Paul Oxman with Cisco PSIRT. For mitigations and workarounds, please consult the Cisco Security Response available at: http://www.cisco.com/warp/public/707/cisco-sr-20081105-vtp.shtml Regards From: showrun.lee mailto:[email protected]...

Cisco - VLAN Trunking Protocol Denial of Service

Cisco - VLAN Trunking Protocol Denial of Service /DoS code for Cisco VLAN Trunking Protocol Vulnerability vulerability discription: http://www.cisco.com/warp/public/707/cisco-sr-20081105-vtp.shtml To Known: 1.the switch must in Server/Client Mode. 2.the port ,attacker connected,must be in trunk...

Cisco - VLAN Trunking Protocol Denial of Service

/DoS code for Cisco VLAN Trunking Protocol Vulnerability vulerability discription: http://www.cisco.com/warp/public/707/cisco-sr-20081105-vtp.shtml To Known: 1.the switch must in Server/Client Mode. 2.the port ,attacker connected,must be in trunk Mode. Cisco Ethernet ports with no configuration a...

Cisco VLAN Trunking Protocol Denial Of Service

/DoS code for Cisco VLAN Trunking Protocol Vulnerability vulerability discription: http://www.cisco.com/warp/public/707/cisco-sr-20081105-vtp.shtml To Known: 1.the switch must in Server/Client Mode. 2.the port ,attacker connected,must be in trunk Mode. Cisco Ethernet ports with no configuration a...

S21sec-034-en: Cisco VTP DoS vulnerability

ID: S21SEC-034-en Title: Cisco VTP Denial Of Service Date: 26/01/2007 Status: Vendor contacted, bug fixed Severity: Medium - DoS - remote from the local subnet Scope: Cisco Catalyst Switch denial of service Platforms: IOS Author: Alfredo Andres Omella, David Barroso Berrueta Location:...

CVE-2005-4440

The 802.1q VLAN protocol allows remote attackers to bypass network segmentation and spoof VLAN traffic via a message with two 802.1q tags, which causes the second tag to be redirected from a downstream switch after the first tag has been stripped, as demonstrated by Yersinia, aka "double-tagging...

CVE-2005-4440

The CVE describes a vulnerability in the 802.1q VLAN protocol where a crafted frame containing two 802.1q tags can cause the second tag to be redirected after the first is stripped, enabling a remote attacker to bypass network segmentation and spoof VLANs. Demonstrated by the tool Yersinia (doubl...