openswan: Insecure auxiliary /tmp file usage (symlink attack possible)

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the 1 ipseclive.conn and 2 ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream...

Important: Red Hat Security Advisory: openswan security update

Updated openswan packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key...

DSA-1760-1 openswan - denial of service

Bulletin has no description...

DSA-1759-1 strongswan - denial of service

Bulletin has no description...

Ubuntu: Security Advisory (USN-641-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-450-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for ipsec-tools vulnerabilities USN-641-1

Ubuntu Update for Linux kernel vulnerabilities USN-641-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6411.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ipsec-tools vulnerabilities USN-641-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for ipsec-tools vulnerability USN-450-1

Ubuntu Update for Linux kernel vulnerabilities USN-450-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4501.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ipsec-tools vulnerability USN-450-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Openswan: Insecure temporary file creation

Background Openswan is an implementation of IPsec for Linux. Description Dmitry E. Oboukhov reported that the IPSEC livetest tool does not handle the ipseclive.conn and ipsec.olts.remote.log temporary files securely. Impact A local attacker could perform symlink attacks to execute arbitrary code...

RedHat Update for ipsec-tools RHSA-2008:0849-01

Check for the Version of ipsec-tools OpenVAS Vulnerability Test RedHat Update for ipsec-tools RHSA-2008:0849-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

RedHat Update for ipsec-tools RHSA-2008:0849-01

Check for the Version of ipsec-tools OpenVAS Vulnerability Test RedHat Update for ipsec-tools RHSA-2008:0849-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CentOS Update for ipsec-tools CESA-2008:0849 centos3 i386

Check for the Version of ipsec-tools OpenVAS Vulnerability Test CentOS Update for ipsec-tools CESA-2008:0849 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for ipsec-tools FEDORA-2007-665

Check for the Version of ipsec-tools OpenVAS Vulnerability Test Fedora Update for ipsec-tools FEDORA-2007-665 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for fetchmail FEDORA-2007-041

Check for the Version of fetchmail OpenVAS Vulnerability Test Fedora Update for fetchmail FEDORA-2007-041 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for ipsec-tools CESA-2008:0849 centos3 i386

Check for the Version of ipsec-tools OpenVAS Vulnerability Test CentOS Update for ipsec-tools CESA-2008:0849 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS Update for ipsec-tools CESA-2008:0849 centos3 x86_64

Check for the Version of ipsec-tools OpenVAS Vulnerability Test CentOS Update for ipsec-tools CESA-2008:0849 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS Update for ipsec-tools CESA-2008:0849 centos3 x86_64

Check for the Version of ipsec-tools OpenVAS Vulnerability Test CentOS Update for ipsec-tools CESA-2008:0849 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for ipsec-tools FEDORA-2007-665

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ipsec-tools FEDORA-2008-9016

Check for the Version of ipsec-tools OpenVAS Vulnerability Test Fedora Update for ipsec-tools FEDORA-2008-9016 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for ipsec-tools FEDORA-2008-9016

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...