CVE-2009-0687
MidnightBSD - Denial of Service via Crafted IP Packets in PF Packet Filter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-0687. PoCs published by Rembrandt, nonroot.
AI-analyzed exploit summary This is a detailed advisory describing a Denial of Service (DoS) vulnerability in PF (OpenBSD Packet Filter) due to a NULL-pointer dereference when handling malformed IP datagrams. The advisory includes affected software, patches, and a simple reproduction method using hping.
Description
The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.
Exploits (3)
This is a detailed advisory describing a Denial of Service (DoS) vulnerability in PF (OpenBSD Packet Filter) due to a NULL-pointer dereference when handling malformed IP datagrams. The advisory includes affected software, patches, and a simple reproduction method using hping.
This exploit sends an ICMPv6 packet to a target host, potentially triggering a denial-of-service condition due to improper handling of ICMPv6 packets in certain systems. The code uses Scapy to craft and send the packet.
This is a writeup describing a Denial of Service (DoS) vulnerability in OpenBSD's PF firewall due to a null pointer dereference when handling specially crafted IP datagrams. The issue can be triggered via an nmap scan with the -sO flag.