[SECURITY] [DSA 1804-1] New ipsec-tools packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1804-1 [email protected] http://www.debian.org/security/ Nico Golde May 20th, 2009 http://www.debian.org/security/faq -...

DSA-1804-1 ipsec-tools - denial of service

Bulletin has no description...

[Full-disclosure] [ MDVSA-2009:114 ] ipsec-tools

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:114 http://www.mandriva.com/security/ Package : ipsec-tools Date : May 18, 2009 Affected: Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Multiple memory leaks in Ipsec-tools before 0.7.2 allo...

IPSec-Tools Memory Leakage Vulnerability

This host is installed with IPSec-Tools for Linux and is prone to Memory Leakage Vulnerability. OpenVAS Vulnerability Test $Id: secpodipsec-toolsmemoryleakagevuln.nasl 5055 2017-01-20 14:08:39Z teissa $ IPSec-Tools Memory Leakage Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009...

CVE-2009-1632

CVE-2009-1632 affects ipsec-tools up to version 0.7.1 (before 0.7.2). The vulnerability involves multiple memory leaks in the racoon daemon, caused by issues in (1) signature verification during X.509 authentication (eay_check_x509sign in src/racoon/crypto_openssl.c) and (2) NAT-Traversal keepali...

Debian DSA-1632-1 : tiff - buffer underflow

Drew Yao discovered that libTIFF, a library for handling the Tagged Image File Format, is vulnerable to a programming error allowing malformed tiff files to lead to a crash or execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

CVE-2008-1632

CVE-2008-1632 affects CuteFlow 2.10.0 with multiple SQL injection flaws in pages/editmailinglist_step1.php (listid), pages/edituser.php (userid), pages/editfield.php (fieldid), and pages/edittemplate_step1.php (templateid). Root cause is unsafe SQL construction allowing remote authenticated users...

CVE-2007-1632

TYPOlight webCMS is affected by CVE-2007-1632 for versions before 2.2 Build 5. The connected Nessus entry describes an unspecified vulnerability in TYPOlight

CVE-2005-1632

Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/...

CVE-2002-1632

CVE-2002-1632 is documented in multiple security feeds as an information disclosure flaw in Oracle 9i Application Server (9iAS). The affected component is the 9iAS sample pages, which can leak environment variables and other sensitive information through the pages named info.jsp, printenv, echo, ...

CVE-2004-1632

MoniWiki is affected by CVE-2004-1632: a cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki 1.0.8 and earlier. The issue arises from insufficient validation of arguments to wiki.php, allowing remote attackers to inject arbitrary web script or HTML. Impact: XSS in users’ browsers; ex...