Enterasys Xsr Security Routers Dos

Full Version: Enterasys Xsr Security Routers Dos

GovernmentSecurity.org > The Archives > Exploit Articles

qcred11

Jul 3 2004, 04:36 PM

QUOTE

Description: Enterasys XSR Security Routers crash when passing a packet
with the option record route.

System Vulnerable: This vulnerability was found in XSR-1800 series.
(firmware 7.0.0.0)

Proof-of-concept: I've used Hping (http://www.hping.org/) to perform
this example:

hping3 -1 -G www.uol.com.br

Vendor was informed about this.

Frederico Queiroz
Security Consultant/ISH Tecnologia
Phone: +55-27-3334-8900
E-mail: fqueiroz_at_ish.com.br

Source: http://seclists.org/lists/bugtraq/2004/Jul/0025.html

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.