Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier.