CVE-2007-6282

The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service crash via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV...

Design/Logic Flaw

The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service crash via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV...

CVE-2007-6282

CVE-2007-6282 affects the Linux kernel IPsec ESP handling: the kernel before 2.6.25 can crash when processing fragmented ESP packets where the first fragment doesn’t include the full ESP header and IV. This was addressed in multiple advisories, with patches and updated kernels provided (e.g., RHS...

ZYWALL Referer Header XSS Vulnerability

Affected Software/Device: Zyxel ZYWall 100 Vulnerability: Cross Site Scripting Risk: Low Description: The ZyWALL 100 is designed to act as a secure gateway via xDSL/Cable modems or broadband routers for small to medium size companies. The ZyWALL 100 features an ICSA certified firewall, IPSec VPN...

CVE-2007-6282

The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service crash via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Design/Logic Flaw

The ipsec4getulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fastipsec subsystem is enabled, allows remote attackers to bypass the IPsec policy by sending packets from a source machine with a different endianness than the destination machine, a...

CVE-2008-1335

The ipsec4getulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fastipsec subsystem is enabled, allows remote attackers to bypass the IPsec policy by sending packets from a source machine with a different endianness than the destination machine, a...

CVE-2008-1335

CVE-2008-1335 affects NetBSD kernel (ipsec4_get_ulp) on 2.0–3.1 and NetBSD-current before 20071028 with fast_ipsec enabled, allowing remote attackers to bypass IPsec policy by sending packets from a source with different endianness than the destination. This is a separate vulnerability from CVE-2...

CVE-2008-1205

Unspecified vulnerability in the ipsecah kernel module in Sun Solaris 10, when a key management daemon for IPsec security associations is running, allows local users to cause a denial of service panic via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in the ipsecah kernel module in Sun Solaris 10, when a key management daemon for IPsec security associations is running, allows local users to cause a denial of service panic via unspecified vectors...

Default configuration

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key PSK hash...

CVE-2008-1198

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key PSK hash...

CVE-2008-1198

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key PSK hash...

CVE-2008-1198

CVE-2008-1198 is tied to initscripts in Red Hat Enterprise Linux 3–5 where the default IPsec ifup script configures racoon to use aggressive IKE mode instead of main IKE mode. This configuration allows remote attackers to brute-force or sniff an unencrypted preshared key (PSK) hash, potentially l...

CVE-2008-1198

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key PSK hash...

Microsoft Windows活动目录LDAP请求验证远程拒绝服务漏洞（MS08-003）

BUGTRAQ ID: 27638 CVECAN ID: CVE-2008-0088 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统的LDAP服务实现上存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 由于没有正确地验证特制的LDAP请求，Microsoft Windows 2000和Windows Server 2003上的活动目录实现存在拒绝服务漏洞；此外Windows XP和Windows Server 2003上所安装的活动目录应用模式（ADAM）实现也存在这个漏洞。成功利用这个漏洞的攻击者可能导致计算机停止响应并自动重启。...

KAME Project IPv6 IPComp头远程拒绝服务漏洞

BUGTRAQ ID: 27642 CVECAN ID: CVE-2008-0177 KAME项目是6家日本公司协作为各种BSD系统所提供的免费IPv6、IPsec和Mobile IPv6实现。 KAME项目实现的IPv6协议栈存在漏洞，远程攻击者可能利用此漏洞导致服务器不可用。 如果BSD系统使用了KAME项目的IPv6实现的话，则在处理有IPComp头的IPv6报文时kame/sys/netinet6/ipcompinput.c文件的ipcomp6input函数会出现空指针引用。如果将内核配置为处理IPsec和IPv6通讯的话，单个特制的IPv6报文可能导致内核忙碌。 FreeBSD...

FreeBSD Security Advisory FreeBSD-SA-08:04.ipsec

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08:04.ipsec Security Advisory The FreeBSD Project Topic: IPsec null pointer dereference panic Category: core Module: ipsec Announced: 2008-02-14 Credits: Takashi...

FreeBSD IPSec DoS

NULL pointer dereference on IPSec packet parsing...