ipsec -- Incorrect key usage in AES-XCBC-MAC

Problem description A programming error in the implementation of the AES-XCBC-MAC algorithm for authentication resulted in a constant key being used instead of the key specified by the system administrator. Impact If the AES-XCBC-MAC algorithm is used for authentication in the absence of any...

FreeBSD-SA-05:19.ipsec

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:19.ipsec Security Advisory The FreeBSD Project Topic: Incorrect key usage in AES-XCBC-MAC Category: core Module: netinet6 Announced: 2005-07-27 Credits: Yukiyo...

FreeBSD Security Advisory FreeBSD-SA-05:19.ipsec

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:19.ipsec Security Advisory The FreeBSD Project Topic: Incorrect key usage in AES-XCBC-MAC Category: core Module: netinet6 Announced: 2005-07-27 Credits: Yukiyo...

[Full-disclosure] ICMP attacks against TCP: Conclusions

Folks, My posts to this list have tried to show how easy it is to perform ICMP attacks against TCP. The attacks are blind, so the attacker does not need to be a "man in the middle" to perform then. The typical number of packets required to perform any of these attacks is about 16000 in many cases...

SSH IPSEC Express 3.0.1 VPN Detection

Binary data 3081.prm...

SSH IPSEC Express 2.1.0 VPN Detection

Binary data 3077.prm...

SSH IPSEC Express 2.1.2 VPN Detection

Binary data 3079.prm...

SSH IPSEC Express 4.0.0 VPN Detection

Binary data 3082.prm...

SSH IPSEC Express 3.0.0 VPN Detection

Binary data 3080.prm...

SSH IPSEC Express 2.0.0 VPN Detection

Binary data 3076.prm...

SSH IPSEC Express 1.1.2 VPN Detection

Binary data 3073.prm...

SSH IPSEC Express 4.0.1 VPN Detection

Binary data 3083.prm...

SSH IPSEC Express 1.1.1 VPN Detection

Binary data 3072.prm...

SSH IPSEC Express 4.1.0 VPN Detection

Binary data 3084.prm...

SSH IPSEC Express 2.1.1 VPN Detection

Binary data 3078.prm...

SSH IPSEC Express 1.1.0 VPN Detection

Binary data 3071.prm...

SSH IPSEC Express 1.2.2 VPN Detection

Binary data 3075.prm...

SSH IPSEC Express 4.2.0 VPN Detection

Binary data 3085.prm...

SSH IPSEC Express 1.2.1 VPN Detection

Binary data 3074.prm...

CVE-2004-2230

CVE-2004-2230 : Heap-based buffer overflow in isakmpd on OpenBSD 3.4–3.6 allows local users to trigger a denial of service (panic) and memory corruption via IPSEC credentials on a socket. Affected software: OpenBSD’s isakmpd (versions 3.4–3.6). Root cause: heap-based overflow in handling IPSEC cr...