Short Name |
DOS:IP:IGMP-OVERSIZE
|
Severity |
High
|
Recommended |
No
|
Recommended Action |
Drop
|
Category |
DOS
|
Keywords |
IGMP Oversize
|
Release Date |
2003/10/15
|
Update Number |
1213
|
Supported Platforms |
idp-4.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+
|
DOS: IGMP Oversize
This signature detects attempts to exploit a known vulnerability against the IGMP header in Microsoft Windows 98 and 2000 TCP/IP stacks. Attackers can send maliciously crafted IGMP headers to cause the stack to fail and cause a denial of service.
Extended Description
The Windows 98 and Windows 2000 TCP/IP stacks were not built to reliably tolerate malformed IGMP headers. When one is received, the stack will sometimes fail with unpredictable results ranging from a Blue Screen to instantaneous reboot.
Affected Products
- Microsoft windows_2000_server
- Microsoft windows_95
- Microsoft windows_98
- Microsoft windows_nt 4.0
- Microsoft windows_nt 4.0 SP1
- Microsoft windows_nt 4.0 SP2
- Microsoft windows_nt 4.0 SP3
- Microsoft windows_nt 4.0 SP4
- Microsoft windows_nt 4.0 SP5
- Microsoft windows_nt_enterprise_server 4.0
- Microsoft windows_nt_enterprise_server 4.0 SP1
- Microsoft windows_nt_enterprise_server 4.0 SP2
- Microsoft windows_nt_enterprise_server 4.0 SP3
- Microsoft windows_nt_enterprise_server 4.0 SP4
- Microsoft windows_nt_enterprise_server 4.0 SP5
- Microsoft windows_nt_server 4.0
- Microsoft windows_nt_server 4.0 SP1
- Microsoft windows_nt_server 4.0 SP2
- Microsoft windows_nt_server 4.0 SP3
- Microsoft windows_nt_server 4.0 SP4
- Microsoft windows_nt_server 4.0 SP5
- Microsoft windows_nt_terminal_server 4.0
- Microsoft windows_nt_terminal_server 4.0 SP1
- Microsoft windows_nt_terminal_server 4.0 SP2
- Microsoft windows_nt_terminal_server 4.0 SP3
- Microsoft windows_nt_terminal_server 4.0 SP4
- Microsoft windows_nt_terminal_server 4.0 SP5
- Microsoft windows_nt_workstation 4.0
- Microsoft windows_nt_workstation 4.0 SP1
- Microsoft windows_nt_workstation 4.0 SP2
- Microsoft windows_nt_workstation 4.0 SP3
- Microsoft windows_nt_workstation 4.0 SP4
- Microsoft windows_nt_workstation 4.0 SP5
References