tcp vulnerabilities and exploits

(subscribe to this query)

The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been sent but not acknowledged (aka "TCP sequence number checking"), which makes it easier for malicious users to fo...

The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged (aka "TCP acknowledgement number checking"), whi...

The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for malicious users to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) bl...

The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for malicious users to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset ...

The Transmission Control Protocol (TCP) allows remote malicious users to cause a denial of service (bandwidth consumption) by sending ACK messages for packets that have not yet been received (optimistic ACKs), which can cause the sender to increase its transmission rate until it ...

Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server prior to 3.0.2 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a MODBUS response packet with a crafted length field.

Automatedsolutions Modbus/tcp Master Opc Server 2.7c Automatedsolutions Modbus/tcp Master Opc Server 3.0.0 Automatedsolutions Modbus/tcp Master Opc Server 2.6a Automatedsolutions Modbus/tcp Master Opc Server 2.0 Build 1 Automatedsolutions Modbus/tcp Master Opc Server 2.5 Automatedsolutions Modbus/tcp Master Opc Server 2.1 Automatedsolutions Modbus/tcp Master Opc Server 2.2 Automatedsolutions Modbus/tcp Master Opc Server 2.9.4 Automatedsolutions Modbus/tcp Master Opc Server 2.7 Automatedsolutions Modbus/tcp Master Opc Server 2.6 Automatedsolutions Modbus/tcp Master Opc Server 2.7a Automatedsolutions Modbus/tcp Master Opc Server 2.8 Automatedsolutions Modbus/tcp Master Opc Server 2.7f Automatedsolutions Modbus/tcp Master Opc Server 2.4a Automatedsolutions Modbus/tcp Master Opc Server 2.10 Automatedsolutions Modbus/tcp Master Opc Server 2.9 Build 2.9.3 Automatedsolutions Modbus/tcp Master Opc Server 2.9.1 Automatedsolutions Modbus/tcp Master Opc Server 2.12.3 Automatedsolutions Modbus/tcp Master Opc Server 2.3a Automatedsolutions Modbus/tcp Master Opc Server 2.0 Automatedsolutions Modbus/tcp Master Opc Server 2.6b Automatedsolutions Modbus/tcp Master Opc Server 2.12

1 EDB exploit

Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote malicious users to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") ...

Icmp Icmp Tcp Tcp

2 EDB exploits

The UCX POP server in HP TCP/IP services for OpenVMS 4.2 up to and including 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.

Compaq Tcp-ip Services 5.0a Compaq Tcp-ip Services 5.3 Compaq Tcp-ip Services 4.2 Compaq Tcp-ip Services 5.1

1 EDB exploit

Unspecified vulnerability in the POP and IMAP service implementations in HP TCP/IP Services 5.6 and 5.7 for OpenVMS allows remote malicious users to obtain sensitive information via unknown vectors.

Hp Tcp Ip Services Openvms 5.6 Hp Tcp Ip Services Openvms 5.7

Unspecified vulnerability in the SMTP service implementation in HP TCP/IP Services 5.6 and 5.7 for OpenVMS allows remote malicious users to cause a denial of service via unknown vectors.

Hp Tcp Ip Services Openvms 5.6 Hp Tcp Ip Services Openvms 5.7

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook