IPRoute Fragmented Packets Denial Of Service Vulnerability

Bugtraq ID:	3639
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 05 2001 12:00AM
Updated:	Dec 05 2001 12:00AM
Credit:	This vulnerability was announced by Chris Gragsone <[email protected]> via Bugtraq on December 05, 2001.
Vulnerable:	David Mischler IPRoute 1.18 David Mischler IPRoute 1.10 David Mischler IPRoute 0.974 David Mischler IPRoute 0.973
Not Vulnerable:

IPRoute Fragmented Packets Denial Of Service Vulnerability

IPRoute is a software package designed as a dropin router solution for a PC. It was originally written by David Mischler.



An IPRoute system fails to handle being scanned using fragmented IP packets that split the tcp header. Once IPRoute receives the packets from a host, IPRoute crashes, requiring a manual restart to resume service.

IPRoute Fragmented Packets Denial Of Service Vulnerability

No exploit is required for this vulnerability.

IPRoute Fragmented Packets Denial Of Service Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IPRoute Fragmented Packets Denial Of Service Vulnerability

References: