| oval
via4
|
| accepted | 2011-05-09T04:01:20.887-04:00 | | class | vulnerability | | contributors | | name | Robert L. Hollis | | organization | ThreatGuard, Inc. |
| name | Matthew Wojcik | | organization | The MITRE Corporation |
| name | Todd Dolinsky | | organization | Opsware, Inc. |
| name | Shane Shaffer | | organization | G2, Inc. |
| | description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | | family | unix | | id | oval:org.mitre.oval:def:181 | | status | accepted | | submitted | 2006-09-22T05:48:00.000-04:00 | | title | HP-UX 11.00 Path MTU Discovery Attack Vulnerability | | version | 40 |
| accepted | 2014-03-24T04:01:16.817-04:00 | | class | vulnerability | | contributors | | name | Robert L. Hollis | | organization | ThreatGuard, Inc. |
| name | Matthew Wojcik | | organization | The MITRE Corporation |
| name | Todd Dolinsky | | organization | Opsware, Inc. |
| name | Shane Shaffer | | organization | G2, Inc. |
| name | Sushant Kumar Singh | | organization | Hewlett-Packard |
| | description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | | family | unix | | id | oval:org.mitre.oval:def:196 | | status | accepted | | submitted | 2006-09-22T05:48:00.000-04:00 | | title | HP-UX 11.11 Path MTU Discovery Attack Vulnerability | | version | 43 |
| accepted | 2011-05-16T04:02:25.416-04:00 | | class | vulnerability | | contributors | | name | Matthew Burton | | organization | The MITRE Corporation |
| name | John Hoyland | | organization | Centennial Software |
| name | Sudhir Gandhe | | organization | Telos |
| name | Shane Shaffer | | organization | G2, Inc. |
| | description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | | family | windows | | id | oval:org.mitre.oval:def:2188 | | status | accepted | | submitted | 2005-04-22T12:00:00.000-04:00 | | title | Win2k Path MTU Discovery Attack Vulnerability | | version | 41 |
| accepted | 2011-05-16T04:02:54.455-04:00 | | class | vulnerability | | contributors | | name | Matthew Burton | | organization | The MITRE Corporation |
| name | John Hoyland | | organization | Centennial Software |
| name | Dragos Prisaca | | organization | Gideon Technologies, Inc. |
| name | Brendan Miles | | organization | The MITRE Corporation |
| name | Sudhir Gandhe | | organization | Telos |
| name | Shane Shaffer | | organization | G2, Inc. |
| | description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | | family | windows | | id | oval:org.mitre.oval:def:3826 | | status | accepted | | submitted | 2005-08-18T04:00:00.000-04:00 | | title | WinXP Path MTU Discovery Attack Vulnerability | | version | 44 |
| accepted | 2014-03-10T04:00:50.464-04:00 | | class | vulnerability | | contributors | | name | Robert L. Hollis | | organization | ThreatGuard, Inc. |
| name | Matthew Wojcik | | organization | The MITRE Corporation |
| name | Todd Dolinsky | | organization | Opsware, Inc. |
| name | Shane Shaffer | | organization | G2, Inc. |
| name | Sushant Kumar Singh | | organization | Hewlett-Packard |
| | description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | | family | unix | | id | oval:org.mitre.oval:def:405 | | status | accepted | | submitted | 2006-09-22T05:48:00.000-04:00 | | title | HP-UX 11.23 Path MTU Discovery Attack Vulnerability | | version | 43 |
| accepted | 2008-09-08T04:00:22.253-04:00 | | class | vulnerability | | contributors | | name | Yuzheng Zhou | | organization | Hewlett-Packard |
| | description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | | family | ios | | id | oval:org.mitre.oval:def:5386 | | status | accepted | | submitted | 2008-05-26T11:06:36.000-04:00 | | title | Multiple Vendor ICMP Path MTU Discovery Connection Degradation DoS Vulnerability | | version | 3 |
| accepted | 2014-03-24T04:01:52.274-04:00 | | class | vulnerability | | contributors | | name | Robert L. Hollis | | organization | ThreatGuard, Inc. |
| name | Matthew Wojcik | | organization | The MITRE Corporation |
| name | Shane Shaffer | | organization | G2, Inc. |
| name | Sushant Kumar Singh | | organization | Hewlett-Packard |
| name | Sushant Kumar Singh | | organization | Hewlett-Packard |
| | description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | | family | unix | | id | oval:org.mitre.oval:def:651 | | status | accepted | | submitted | 2006-09-22T05:48:00.000-04:00 | | title | HP-UX 11.11 or 11.23 Path MTU Discovery Attack Vulnerability | | version | 42 |
| accepted | 2013-09-02T04:05:56.681-04:00 | | class | vulnerability | | contributors | | name | Matthew Burton | | organization | The MITRE Corporation |
| name | John Hoyland | | organization | Centennial Software |
| name | Sudhir Gandhe | | organization | Telos |
| name | Shane Shaffer | | organization | G2, Inc. |
| name | Dragos Prisaca | | organization | G2, Inc. |
| | description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | | family | windows | | id | oval:org.mitre.oval:def:780 | | status | accepted | | submitted | 2005-08-18T04:00:00.000-04:00 | | title | Server 2003 Path MTU Discovery Attack Vulnerability | | version | 44 |
| accepted | 2011-05-09T04:01:48.788-04:00 | | class | vulnerability | | contributors | | name | Robert L. Hollis | | organization | ThreatGuard, Inc. |
| name | Matthew Wojcik | | organization | The MITRE Corporation |
| name | Todd Dolinsky | | organization | Opsware, Inc. |
| name | Shane Shaffer | | organization | G2, Inc. |
| | description | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. | | family | unix | | id | oval:org.mitre.oval:def:899 | | status | accepted | | submitted | 2006-09-22T05:48:00.000-04:00 | | title | HP-UX 11.04 Path MTU Discovery Attack Vulnerability | | version | 40 |
|
