TheGreenBow IPSec VPN客户端TgbVPN.sys拒绝服务漏洞

TheGreenBow IPSec VPN Client是一款流行的VPN客户端。 TheGreenBow IPSec VPN客户端TgbVPN.sys内核驱动处理IOCTLs时存在NULL指针引用错误，本地攻击者可以利用漏洞发送0x80000034 IOCTL使系统崩溃。 TheGreenBow IPSec VPN Client 4.x 目前没有详细解决方案提供： http://www.thegreenbow.com/vpn.html...

CVE-2009-2918

The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer size of 0...

CVE-2009-2918

The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer size of 0...

CVE-2009-2918

The GreenBow IPSec VPN Client (tgbvpn.sys) is affected by CVE-2009-2918. The vulnerability allows local users to cause a denial of service via a crafted request to IOCTL 0x80000034, likely involving an input/output buffer size of 0 and triggering a NULL pointer dereference that crashes the system...

openSUSE Security Update : novell-ipsec-tools (novell-ipsec-tools-1007)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : ipsec-tools (ipsec-tools-996)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : ipsec-tools (ipsec-tools-996)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : novell-ipsec-tools (novell-ipsec-tools-389)

Remote attackers could exploit memory leaks in the 'racoon' daemon to crash it CVE-2008-3651, CVE-2008-3652 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update novell-ipsec-tools-389. The text...

openSUSE Security Update : ipsec-tools (ipsec-tools-223)

Remote attackers could exploit memory leaks in the 'racoon' daemon to crash it CVE-2008-3651, CVE-2008-3652 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ipsec-tools-223. The text descriptio...

Openswan <= 2.4.12/2.6.16 Insecure Temp File Creation Root Exploit

Exploit for linux platform in category local exploits ================================================================== Openswan /etc/passwd' /tmp/ipseclive.conn rm /tmp...

[SECURITY] Fedora 11 Update: openswan-2.6.21-5.fc11

Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 10 Update: openswan-2.6.21-2.fc10

Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

RedHat Security Advisory RHSA-2009:1138

The remote host is missing updates announced in advisory RHSA-2009:1138. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

RedHat Security Advisory RHSA-2009:1138

The remote host is missing updates announced in advisory RHSA-2009:1138. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

RHEL 5 : openswan (RHSA-2009:1138)

Updated openswan packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Ke...

openswan security update

CentOS Errata and Security Advisory CESA-2009:1138 Updated openswan packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation ...

openSUSE 10 Security Update : ipsec-tools (ipsec-tools-6302)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

Ubuntu: Security Advisory (USN-785-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : ipsec-tools vulnerabilities (USN-785-1)

It was discovered that ipsec-tools did not properly handle certain fragmented packets. A remote attacker could send specially crafted packets to the server and cause a denial of service. CVE-2009-1574 It was discovered that ipsec-tools did not properly handle memory usage when verifying certifica...

USN-785-1: ipsec-tools vulnerabilities

It was discovered that ipsec-tools did not properly handle certain fragmented packets. A remote attacker could send specially crafted packets to the server and cause a denial of service. CVE-2009-1574 It was discovered that ipsec-tools did not properly handle memory usage when verifying certifica...