FreeBSD IPSec DoS

NULL pointer dereference on IPSec packet parsing...

FreeBSD-SA-08:04.ipsec

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08:04.ipsec Security Advisory The FreeBSD Project Topic: IPsec null pointer dereference panic Category: core Module: ipsec Announced: 2008-02-14 Credits: Takashi...

openSUSE 10 Security Update : novell-ipsec-tools (novell-ipsec-tools-4655)

This update fixes a security problem in novell-ipsec-tools : CVE-2007-1841: Fix a DoS in isakmpinforecv and also a non-security bug with a crash in GSSAPI. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Memory corruption

Cisco Systems VPN Client IPSec Driver CVPNDRVA.sys 5.0.02.0090 allows local users to cause a denial of service crash by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption...

CVE-2008-0324

Cisco Systems VPN Client IPSec Driver CVPNDRVA.sys 5.0.02.0090 allows local users to cause a denial of service crash by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption...

Debian Security Advisory DSA 201-1 (freeswan)

The remote host is missing an update to freeswan announced via advisory DSA 201-1. OpenVAS Vulnerability Test $Id: deb2011.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 201-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1299-1 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory DSA 1299-1. OpenVAS Vulnerability Test $Id: deb12991.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1299-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 965-1 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory DSA 965-1. The Internet Key Exchange version 1 IKEv1 implementation in racoon from ipsec-tools, IPsec tools for Linux, try to dereference a NULL pointer under certain conditions which allows a remote attacker to cause a...

Debian: Security Advisory (DSA-965-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1299-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco VPN Client IPSec Driver Local kernel system pool Corruption PoC

Exploit for unknown platform in category dos / poc ===================================================================== Cisco VPN Client IPSec Driver Local kernel system pool Corruption PoC ===================================================================== / cpndrv-dos.c Copyright c 2008 by...

Cisco VPN Client IPSec Driver Local kernel system pool Corruption PoC

No description provided by source. / cpndrv-dos.c Copyright c 2008 by [email protected] Cisco Systems VPN Client IPSec Driver local kernel system pool corruption POC by mu-b - Sat 11 Jan 2008 - Tested on: CVPNDRVA.sys 5.0.02.0090 specifying an input buffer size less-than 8+31-bytes results in t...

Cisco VPN Client - IPSec Driver Local kernel system pool Corruption (PoC)

/ cpndrv-dos.c Copyright c 2008 by Cisco Systems VPN Client IPSec Driver local kernel system pool corruption POC by mu-b - Sat 11 Jan 2008 - Tested on: CVPNDRVA.sys 5.0.02.0090 specifying an input buffer size less-than 8+31-bytes results in the local kernel non-paged pool METHODBUFFERED being...

Cisco VPN Client - IPSec Driver Local kernel system pool Corruption (PoC)

Cisco VPN Client - IPSec Driver Local kernel system pool Corruption PoC / cpndrv-dos.c Copyright c 2008 by Cisco Systems VPN Client IPSec Driver local kernel system pool corruption POC by mu-b - Sat 11 Jan 2008 - Tested on: CVPNDRVA.sys 5.0.02.0090 specifying an input buffer size less-than...

SuSE 10 Security Update : Recommended update for novell-ipsec-tools (ZYPP Patch Number 4656)

This update fixes a segfault in the GSSAPI initialization. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29961; scriptversion"1.13";...

SuSE 10 Security Update : ipsec-tools (ZYPP Patch Number 3099)

A bug in the IKE daemon 'racoon' allowed remote attackers shut down established tunnels. CVE-2007-1841 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29466;...

Code injection

The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service module crash via an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy PFS...

CVE-2007-6094

The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service module crash via an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy PFS...

CVE-2007-6094

The CVE-2007-6094 entry describes a DoS vulnerability in the IPsec module of Ingate Firewall (and SIParator) prior to version 4.6.0. A remote attacker can crash the module by sending an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy (PFS). Affected products: Ingate Firewall before 4.6....

Ubuntu 5.10 / 6.06 LTS / 6.10 : ipsec-tools vulnerability (USN-450-1)

A flaw was discovered in the IPSec key exchange server 'racoon'. Remote attackers could send a specially crafted packet and disrupt established IPSec tunnels, leading to a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...