TMS zl Module IPS/IDS Signature Reference Guide RLX.10.2.2.94

ProCurve TMS zl Module IPS/IDS Signature
Reference Guide Version RLX.10.2.2.94
839
Internet Protocol (IP) and it is the first version of the protocol to be widely deployed. IPv4 is the dominant network
layer protocol on the Internet. The creators of IPv4 included the ability to add options that provide additional flexibility
in how IP handles datagrams. The IP datagram may contain zero or more options, which makes the total length of the
Options field in the IP header variable. CISCO IOS is the operating system used on the vast majority of Cisco Systems
routers and all current Cisco network switches. A vulnerability exists in the way Cisco IOS processes a number of
different types of IPv4 packets containing a specially crafted IP option. Successful exploitation of this vulnerability
may allow an attacker to execute arbitrary code on an affected device or create a denial-of-service condition. This
signature detects attack vectors on ICMP - Timestamp (Type 13).
Signature ID: 34785
Cisco IOS Crafted IP Option Vulnerability
Threat Level: Warning
Industry ID: CVE-2007-0480 Bugtraq: 22211
Signature Description: The Internet Protocol (IP) is a protocol used for communicating data across a packet-switched
internetwork using the TCP/IP suite of protocols. Internet Protocol version 4 (IPv4) is the fourth iteration of the
Internet Protocol (IP) and it is the first version of the protocol to be widely deployed. IPv4 is the dominant network
layer protocol on the Internet. The creators of IPv4 included the ability to add options that provide additional flexibility
in how IP handles datagrams. The IP datagram may contain zero or more options, which makes the total length of the
Options field in the IP header variable. CISCO IOS is the operating system used on the vast majority of Cisco Systems
routers and all current Cisco network switches. A vulnerability exists in the way Cisco IOS processes a number of
different types of IPv4 packets containing a specially crafted IP option. Successful exploitation of this vulnerability
may allow an attacker to execute arbitrary code on an affected device or create a denial-of-service condition. This
signature detects attack vectors on ICMP-Information Request (Type 15).
Signature ID: 34786
Cisco IOS Crafted IP Option Vulnerability
Threat Level: Warning
Industry ID: CVE-2007-0480 Bugtraq: 22211
Signature Description: The Internet Protocol (IP) is a protocol used for communicating data across a packet-switched
internetwork using the TCP/IP suite of protocols. Internet Protocol version 4 (IPv4) is the fourth iteration of the
Internet Protocol (IP) and it is the first version of the protocol to be widely deployed. IPv4 is the dominant network
layer protocol on the Internet. The creators of IPv4 included the ability to add options that provide additional flexibility
in how IP handles datagrams. The IP datagram may contain zero or more options, which makes the total length of the
Options field in the IP header variable. CISCO IOS is the operating system used on the vast majority of Cisco Systems
routers and all current Cisco network switches. A vulnerability exists in the way Cisco IOS processes a number of
different types of IPv4 packets containing a specially crafted IP option. Successful exploitation of this vulnerability
may allow an attacker to execute arbitrary code on an affected device or create a denial-of-service condition. This
signature detects attack vectors on ICMP - Address Mask Request (Type 17)
Signature ID: 34787
Cisco IOS Crafted IP Option Vulnerability
Threat Level: Warning
Industry ID: CVE-2007-0480 Bugtraq: 22211
Signature Description: The Internet Protocol (IP) is a protocol used for communicating data across a packet-switched
internetwork using the TCP/IP suite of protocols. Internet Protocol version 4 (IPv4) is the fourth iteration of the
Internet Protocol (IP) and it is the first version of the protocol to be widely deployed. IPv4 is the dominant network
layer protocol on the Internet. The creators of IPv4 included the ability to add options that provide additional flexibility
in how IP handles datagrams. The IP datagram may contain zero or more options, which makes the total length of the
Options field in the IP header variable. CISCO IOS is the operating system used on the vast majority of Cisco Systems
routers and all current Cisco network switches. A vulnerability exists in the way Cisco IOS processes a number of