IPsec-Tools: racoon Denial of service

Background IPsec-Tools is a port of KAME's implementation of the IPsec utilities. It contains a collection of network monitoring tools, including racoon, ping, and ping6. Description Two Denial of Service vulnerabilities have been reported in racoon: The vendor reported a memory leak in...

openSUSE 10 Security Update : ipsec-tools (ipsec-tools-5630)

Remote attackers could exploit memory leaks in the 'racoon' daemon to crash it CVE-2008-3651, CVE-2008-3652 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ipsec-tools-5630. The text descripti...

SuSE 10 Security Update : ipsec-tools (ZYPP Patch Number 5638)

Remote attackers could exploit memory leaks in the 'racoon' daemon to crash it. CVE-2008-3651 / CVE-2008-3652 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Gentoo Security Advisory GLSA 200512-06 (Ethereal)

The remote host is missing updates announced in advisory GLSA 200512-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

RHEL 3 / 4 / 5 : ipsec-tools (RHSA-2008:0849)

An updated ipsec-tools package that fixes two security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionalit...

ipsec security update

CentOS Errata and Security Advisory CESA-2008:0849 An updated ipsec-tools package that fixes two security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The ipsec-tools package...

Important: Red Hat Security Advisory: ipsec-tools security update

An updated ipsec-tools package that fixes two security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionalit...

CVE-2008-3651

CVE-2008-3651 is a memory-leak DoS flaw in the ipsec-tools racoon daemon. Affected component: racoon/proposal.c in ipsec-tools up to version 0.7.1. Root cause: memory leaks that can be triggered by invalid proposals, allowing remote authenticated users to exhaust memory and cause a denial of serv...

CVE-2007-3651

class/page.php in Farsi Script aka FaScript FaName 1.0 allows remote attackers to obtain sensitive information via a '; quote semicolon sequence in the id parameter, which reveals the installation path in an error message...

CVE-2007-3651

Technical details about CVE-2007-3651 are not publicly available in the provided documents; no product/version specifics are disclosed. Monitor for updates.

Debian DSA-920-1 : ethereal - buffer overflow

A buffer overflow has been discovered in ethereal, a commonly used network traffic analyser that causes a denial of service and may potentially allow the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Microsoft Word vulnerable to remote code execution

Overview A remote code execution vulnerability in Microsoft Word can allow a remote attacker to execute arbitrary code via a specially crafted mail merge file. Description Microsoft Word contains a remote code execution vulnerability that can be exploited when a specially crafted mail merge file ...

CVE-2006-3651

CVE-2006-3651 is the Microsoft Word Mail Merge vulnerability. The connected documents confirm a memory handling flaw in Word’s mail-merge handling that can allow remote code execution when a specially crafted mail-merge file is opened. Affected products include Word 2000, 2002, 2003, and Word 200...

Microsoft Windows Media Player PBG File Processing Overflow (917734)

Binary data 3651.prm...

ethereal security update

CentOS Errata and Security Advisory CESA-2006:0156-01 Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. T...

RHEL 2.1 / 3 / 4 : ethereal (RHSA-2006:0156)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. Two denial of service bugs were found in Ethereal's IRC...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. Two denial of service bugs were found in Ethereal's IRC...

[SECURITY] [DSA 920-1] New ethereal packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 920-1 [email protected] http://www.debian.org/security/ Martin Schulze December 13th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3651

Stack-based buffer overflow in the dissectospfv3addressprefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets...

CVE-2005-3651

CVE-2005-3651 is a vulnerability in Ethereal (Wireshark) 0.10.12 affecting the OSPF v3 address prefix dissector. The stack-based buffer overflow can be triggered by crafting OSPF packets sent over the network, allowing remote code execution. Multiple advisories confirm this issue and reference af...