111 matches found
Design/Logic Flaw
Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send...
DSquare Exploit Pack: D2SEC_AXIS
Name| d2secaxis ---|--- CVE| CVE-2010-1632 Exploit Pack| D2ExploitPack Description| Apache Axis2 Remote File Access Notes|...
CVE-2010-1632
CVE-2010-1632 affects Apache Axis2 (Java) and is triggered by improper rejection of DTDs in SOAP messages. The issue allows a remote attacker to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service via a crafted DTD, demonstrated by an entity declaration in a...
CentOS 5 : ipsec-tools (CESA-2009:1036)
An updated ipsec-tools package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in...
SLES11: Security update for ipsec-tools
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ipsec-tools More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText: 20...
SLES9: Security update for ipsec-tools
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ipsec-tools For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5052260 within the...
SLES9: Security update for ipsec-tools
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ipsec-tools For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5052260 within the...
openSUSE 10 Security Update : novell-ipsec-tools (novell-ipsec-tools-6307)
This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...
SuSE9 Security Update : ipsec-tools (YOU Patch Number 12438)
This update of ipsec-tools fixes multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
SuSE 11 Security Update : ipsec-tools (SAT Patch Number 998)
This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...
SuSE 11 Security Update : Novell ipsec tools (SAT Patch Number 1006)
This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...
SuSE 10 Security Update : ipsec-tools (ZYPP Patch Number 6301)
This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...
openSUSE Security Update : novell-ipsec-tools (novell-ipsec-tools-1007)
This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...
openSUSE Security Update : ipsec-tools (ipsec-tools-996)
This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...
openSUSE Security Update : novell-ipsec-tools (novell-ipsec-tools-1007)
This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...
openSUSE Security Update : ipsec-tools (ipsec-tools-996)
This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...
openSUSE 10 Security Update : ipsec-tools (ipsec-tools-6302)
This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...
Ubuntu USN-785-1 (ipsec-tools)
The remote host is missing an update to ipsec-tools announced via advisory USN-785-1. OpenVAS Vulnerability Test $Id: ubuntu7851.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7851.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-785-1 ipsec-tools Authors:...
Gentoo Security Advisory GLSA 200905-03 (ipsec-tools)
The remote host is missing updates announced in advisory GLSA 200905-03. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
Debian DSA-1804-1 : ipsec-tools - NULL pointer dereference, memory leaks
Several remote vulnerabilities have been discovered in racoon, the Internet Key Exchange daemon of ipsec-tools. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1574 Neil Kettle discovered a NULL pointer dereference on crafted fragmented packets that...