oval
via4
|
accepted | 2011-05-09T04:01:20.887-04:00 | class | vulnerability | contributors | name | Robert L. Hollis | organization | ThreatGuard, Inc. |
name | Matthew Wojcik | organization | The MITRE Corporation |
name | Todd Dolinsky | organization | Opsware, Inc. |
name | Shane Shaffer | organization | G2, Inc. |
| description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | family | unix | id | oval:org.mitre.oval:def:181 | status | accepted | submitted | 2006-09-22T05:48:00.000-04:00 | title | HP-UX 11.00 Path MTU Discovery Attack Vulnerability | version | 40 |
accepted | 2014-03-24T04:01:16.817-04:00 | class | vulnerability | contributors | name | Robert L. Hollis | organization | ThreatGuard, Inc. |
name | Matthew Wojcik | organization | The MITRE Corporation |
name | Todd Dolinsky | organization | Opsware, Inc. |
name | Shane Shaffer | organization | G2, Inc. |
name | Sushant Kumar Singh | organization | Hewlett-Packard |
| description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | family | unix | id | oval:org.mitre.oval:def:196 | status | accepted | submitted | 2006-09-22T05:48:00.000-04:00 | title | HP-UX 11.11 Path MTU Discovery Attack Vulnerability | version | 43 |
accepted | 2011-05-16T04:02:25.416-04:00 | class | vulnerability | contributors | name | Matthew Burton | organization | The MITRE Corporation |
name | John Hoyland | organization | Centennial Software |
name | Sudhir Gandhe | organization | Telos |
name | Shane Shaffer | organization | G2, Inc. |
| description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | family | windows | id | oval:org.mitre.oval:def:2188 | status | accepted | submitted | 2005-04-22T12:00:00.000-04:00 | title | Win2k Path MTU Discovery Attack Vulnerability | version | 41 |
accepted | 2011-05-16T04:02:54.455-04:00 | class | vulnerability | contributors | name | Matthew Burton | organization | The MITRE Corporation |
name | John Hoyland | organization | Centennial Software |
name | Dragos Prisaca | organization | Gideon Technologies, Inc. |
name | Brendan Miles | organization | The MITRE Corporation |
name | Sudhir Gandhe | organization | Telos |
name | Shane Shaffer | organization | G2, Inc. |
| description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | family | windows | id | oval:org.mitre.oval:def:3826 | status | accepted | submitted | 2005-08-18T04:00:00.000-04:00 | title | WinXP Path MTU Discovery Attack Vulnerability | version | 44 |
accepted | 2014-03-10T04:00:50.464-04:00 | class | vulnerability | contributors | name | Robert L. Hollis | organization | ThreatGuard, Inc. |
name | Matthew Wojcik | organization | The MITRE Corporation |
name | Todd Dolinsky | organization | Opsware, Inc. |
name | Shane Shaffer | organization | G2, Inc. |
name | Sushant Kumar Singh | organization | Hewlett-Packard |
| description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | family | unix | id | oval:org.mitre.oval:def:405 | status | accepted | submitted | 2006-09-22T05:48:00.000-04:00 | title | HP-UX 11.23 Path MTU Discovery Attack Vulnerability | version | 43 |
accepted | 2008-09-08T04:00:22.253-04:00 | class | vulnerability | contributors | name | Yuzheng Zhou | organization | Hewlett-Packard |
| description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | family | ios | id | oval:org.mitre.oval:def:5386 | status | accepted | submitted | 2008-05-26T11:06:36.000-04:00 | title | Multiple Vendor ICMP Path MTU Discovery Connection Degradation DoS Vulnerability | version | 3 |
accepted | 2014-03-24T04:01:52.274-04:00 | class | vulnerability | contributors | name | Robert L. Hollis | organization | ThreatGuard, Inc. |
name | Matthew Wojcik | organization | The MITRE Corporation |
name | Shane Shaffer | organization | G2, Inc. |
name | Sushant Kumar Singh | organization | Hewlett-Packard |
name | Sushant Kumar Singh | organization | Hewlett-Packard |
| description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | family | unix | id | oval:org.mitre.oval:def:651 | status | accepted | submitted | 2006-09-22T05:48:00.000-04:00 | title | HP-UX 11.11 or 11.23 Path MTU Discovery Attack Vulnerability | version | 42 |
accepted | 2013-09-02T04:05:56.681-04:00 | class | vulnerability | contributors | name | Matthew Burton | organization | The MITRE Corporation |
name | John Hoyland | organization | Centennial Software |
name | Sudhir Gandhe | organization | Telos |
name | Shane Shaffer | organization | G2, Inc. |
name | Dragos Prisaca | organization | G2, Inc. |
| description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | family | windows | id | oval:org.mitre.oval:def:780 | status | accepted | submitted | 2005-08-18T04:00:00.000-04:00 | title | Server 2003 Path MTU Discovery Attack Vulnerability | version | 44 |
accepted | 2011-05-09T04:01:48.788-04:00 | class | vulnerability | contributors | name | Robert L. Hollis | organization | ThreatGuard, Inc. |
name | Matthew Wojcik | organization | The MITRE Corporation |
name | Todd Dolinsky | organization | Opsware, Inc. |
name | Shane Shaffer | organization | G2, Inc. |
| description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | family | unix | id | oval:org.mitre.oval:def:899 | status | accepted | submitted | 2006-09-22T05:48:00.000-04:00 | title | HP-UX 11.04 Path MTU Discovery Attack Vulnerability | version | 40 |
|