Mandriva Linux Security Advisory : ipsec-tools (MDVSA-2009:112-1)

racoon/isakmpfrag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service crash via crafted fragmented packets without a payload, which triggers a NULL pointer dereference CVE-2009-1574. Updated packages are available that brings ipsec-tools to version 0.7.2 for Mandriv...

[ MDVSA-2009:112 ] ipsec-tools

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:112 http://www.mandriva.com/security/ Package : ipsec-tools Date : May 13, 2009 Affected: 2008.1, 2009.0, 2009.1, Corporate 4.0 Problem Description: racoon/isakmpfrag.c in ipsec-tools before 0.7.2 allows...

CVE-2009-1632: Undefined Security Weakness

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

ipsec-tools racoon frag-isakmp Denial of Service PoC

Exploit for multiple platform in category dos / poc ==================================================== ipsec-tools racoon frag-isakmp Denial of Service PoC ==================================================== / racoon-isakmp-dos.c ipsec-tools racoon frag-isakmp DoS POC by mu-b - Thu Apr 02 2009...

IPSec Tools Denial of Service Vulnerability

This host is installed with IPSec Tools for Linux and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbipsec-toolsdosvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ IPSec Tools Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone...

IPSec Tools Version Detection

The script detects the version of IPSec Tools for Linux on remote host and sets the result into KB. OpenVAS Vulnerability Test $Id: gbipsec-toolsdetect.nasl 7823 2017-11-20 08:54:04Z cfischer $ IPSec Tools Version Detection Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networks GmbH...

IPsec-Tools 0.7.2 (racoon frag-isakmp) - Multiple Remote Denial of Service Vulnerabilities (PoC)

IPsec-Tools 0.7.2 racoon frag-isakmp - Multiple Remote Denial of Service Vulnerabilities PoC / racoon-isakmp-dos.c Copyright c 2009 by ipsec-tools racoon frag-isakmp DoS POC by mu-b - Thu Apr 02 2009 - Tested on: ipsec-tools-0.7.1 - Private Source Code -DO NOT DISTRIBUTE -...

IPSec Tools Denial of Service Vulnerability

IPSec Tools for Linux is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mac OS X Multiple Vulnerabilities (Security Update 2009-002)

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2009-002 applied. This security update contains fixes for the following products : - Apache - ATS - BIND - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - IPSec -...

IPSec Tools Version Detection

The script detects the version of IPSec Tools for Linux on remote host and sets the result into KB. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.7. Mac OS X 10.5.7 contains security fixes for the following products : - Apache - ATS - BIND - CFNetwork - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - iChat -...

IPsec-Tools < 0.7.2 (racoon frag-isakmp) - Multiple Remote Denial of Service Vulnerabilities (PoC)

/ racoon-isakmp-dos.c Copyright c 2009 by ipsec-tools racoon frag-isakmp DoS POC by mu-b - Thu Apr 02 2009 - Tested on: ipsec-tools-0.7.1 - Private Source Code -DO NOT DISTRIBUTE - http://www.digit-labs.org/ -- Digit-Labs 2009!@$! / include include include include include include include define...

RHEL 5 : kernel (RHSA-2009:0473)

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

CVE-2009-1574

racoon/isakmpfrag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service crash via crafted fragmented packets without a payload, which triggers a NULL pointer dereference...

CVE-2009-1574

racoon/isakmpfrag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service crash via crafted fragmented packets without a payload, which triggers a NULL pointer dereference...

CVE-2009-1574

CVE-2009-1574 affects ipsec-tools prior to 0.7.2, where racoon/isakmp_frag.c can trigger a NULL pointer dereference and crash the daemon when processing crafted fragmented packets without a payload. Several connected advisories note a denial-of-service impact (crash) from this NULL pointer derefe...

CVE-2009-1574

racoon/isakmpfrag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service crash via crafted fragmented packets without a payload, which triggers a NULL pointer dereference...

CVE-2009-1574

Removed by vendor...

NuPoint Messenger server transmits authentication credentials in plain text

Overview NuPoint Messenger is a unified communications product that connects to a Microsoft Exchange server. When communicating with the mail server, the NuPoint Messenger server transmits Exchange usernames and passwords in cleartext. Description The NuPoint Messenger server can connect to a...