CVE-2007-2524

Cross-site scripting XSS vulnerability in index.pl in Open Ticket Request System OTRS 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, b...

IPsec-Tools: Denial of service

Background IPsec-Tools is a port of KAME's implementation of the IPsec utilities. It contains a collection of network monitoring tools, including racoon, ping, and ping6. Description The isakmpinforecv function in src/racoon/isakmpinf.c does not always check that DELETE ISAKMPNPTYPED and NOTIFY...

Cisco PIX and ASA authentication bypass vulnerability

Overview The Cisco ASA and PIX firewalls contain an authentication bypass vulnerability. This vulnerability may allow a remote attacker to gain unauthorized access to the internal network or firewall. Description The Cisco Adaptive Security Appliance ASA is firewall that includes routing and...

Mandrake Linux Security Advisory : ipsec-tools (MDKSA-2007:084)

The ipsec-tools package prior to version 0.6.7 allows remote attackers to cause a Denial of Service tunnel crash via crafted DELTE and NOTIFY messages. Updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Microsoft Windows DNS服务器RPC接口远程栈溢出漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows DNS服务器的RPC接口在处理畸形请求时存在栈溢出漏洞，远程攻击者可能利用此漏洞获取服务器的管理权限。 如果远程攻击者能够向有漏洞的系统发送特制的RPC报文的话，就可以触发这个溢出，导致以DNS服务的安全环境执行任意指令（默认为Local SYSTEM）。 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 SP1 Microsoft Windows 2000SP4 临时解决方法：...

Racoon IPSec key exchange DoS

It's possible to disrupts established IPSec tunnels...

[USN-450-1] ipsec-tools vulnerability

=========================================================== Ubuntu Security Notice USN-450-1 April 09, 2007 ipsec-tools vulnerability CVE-2007-1841 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 Ubuntu 6.06 LTS Ubunt...

CVE-2007-1841

The isakmpinforecv function in src/racoon/isakmpinf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service tunnel crash via crafted 1 DELETE ISAKMPNPTYPED and 2 NOTIFY ISAKMPNPTYPEN messages...

CVE-2007-1841

The isakmpinforecv function in src/racoon/isakmpinf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service tunnel crash via crafted 1 DELETE ISAKMPNPTYPED and 2 NOTIFY ISAKMPNPTYPEN messages...

CVE-2007-1841

CVE-2007-1841 affects ipsec-tools’ racoon daemon, where the function isakmp_info_recv in racoon/src/racoon/isakmp_inf.c can be triggered by crafted DELETE (ISAKMP_NPTYPE_D) or NOTIFY (ISAKMP_NPTYPE_N) messages to cause a denial of service (tunnel crash). Affected releases are ipsec-tools prior to...

CVE-2007-1841

Removed by vendor...

USN-450-1: ipsec-tools vulnerability

A flaw was discovered in the IPSec key exchange server "racoon". Remote attackers could send a specially crafted packet and disrupt established IPSec tunnels, leading to a denial of service...

CVE-2007-1826

CVE-2007-1826 affects Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3). The issue is an unspecified vulnerability that lets remote attackers cause a denial of service (loss of cluster services) by sending a specific UDP packet to UD...

Cisco Unified CallManager和Unified Server多个拒绝服务漏洞

Cisco Unified CallManager提供了一种可扩展、可分布和高可用的企业IP电话呼叫处理解决方案。 Cisco Unified CallManager CUCM和Cisco Unified Presence Server CUPS存在多个安全问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 具体问题如下： - SCCP/SCCPS端口扫描拒绝服务 Skinny Call Control Protocol SCCP协议是Cisco私有语音协议，用于CallManager系统和IP电话的呼叫管理。SCCP使用TCP 2000进行通信，运行在TCP...

Cisco Unified CallManager / Unified Presence Server multiple security vulnerabilities

Denial of service with Skinny / SCCP protocol TCP/2000, TCP/2443, ICMP echo requiests flood, IPSec UDP/8500 parsing...

CVE-2004-2678

Technical details about CVE-2004-2678 are not publicly available in the provided documents. No explicit affected products, versions, or impact are documented here. Monitor for updates from official sources.

CVE-2004-2678

Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2BL22 and PK3BL24, and 5.1A PK6BL24, when using IPsec/IKE Internet Key Exchange with Certificates, allows remote attackers to gain privileges via unknown attack vectors...

MDKA-2006:034 : ipsec-tools

IPsec-Tools1 is a port of KAME's IPsec utilities to the Linux-2.6 IPsec implementation. This update fixes a few issues and introduces new functionalities to the package provided for Mandriva 2006 users: - fixed tunnel mode connection 19460 2 - fixed GSSAPI build - version update: 0.6.6 - enabled...

Microsoft Windows Workstation服务NetpManageIPCConnect远程栈溢出漏洞（MS06-070)

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的Workstation服务组件中存在栈溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 在Workstation服务名为wkssvc.dll的模块中，NetpManageIPCConnect函数以未经检查的缓冲区数据调用了swprintf，而输入缓冲区是远程攻击者可控的。 .text:76781D67 mov edi, ebp+arg0 ... .text:76781D90 lea eax, ebp+var2CC ... .text:76781DA0 push edi .text:76781DA...

OpenBSD ISAKMPD IPsec通信会话回放漏洞

OpenBSD是一款开放源代码Unix类操作系统。 OpenBSD的isakmpd工具在处理通信会话时存在漏洞，远程攻击者可能利用此漏洞执行消息回放攻击。 如果在SA协商期间OpenBSD将isakmpd8用作响应程序的话，则在响应SA协商时isakmpd8就会创建一个大小为0的回放窗口，这样攻击者就可以截获并回放IPSec报文。漏洞的具体影响取决于所回放的网络通讯。 OpenBSD OpenBSD 3.9 OpenBSD OpenBSD 3.8 OpenBSD ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...