Searching reassembly software vulnerabilities

Zyxel Prestige 681 and 1600 SDSL Routers allow

Prestige | Zyxel |

Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with (1) an IP length less than actual packet size, or (2) fragmented packets whose size exceeds 64 kilobytes after reassembly.


SMTP content filter engines, including (1) GFI

including | engines | content | filter | SMTP |

SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.


Integer overflow in the TCP stream reassembly m

reassembly | overflow | Integer | stream | module | TCP |

Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.


The TCP/IP fragment reassembly handling in the

reassembly | attackers | handling | fragment | service | remote | denial | TCP/IP | kernel | allows | Linux | cause |

The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.


Ethereal 0.10.12 and earlier allows remote atta

Ethereal |

Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors in (1) the IrDA dissector and (2) the SMB dissector when SMB transaction payload reassembly is enabled.


nf_conntrack in netfilter in the Linux kernel b

nf_conntrack | netfilter | kernel | before | Linux |

nf_conntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IP_CT_ESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments.


Software vulnerabilities results 1 to 7 of 7     
Page: 1