[SA17568] Juniper JUNOS/JUNOSe ISAKMP IKE Message Processing Denial of Service

TITLE: Juniper JUNOS/JUNOSe ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17568 VERIFY ADVISORY: http://secunia.com/advisories/17568/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: JUNOSe 7.x http://secunia.com/product/6108/ JUNOSe 6.x...

[SA17553] Cisco ISAKMP IKE Message Processing Denial of Service

TITLE: Cisco ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17553 VERIFY ADVISORY: http://secunia.com/advisories/17553/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Cisco SAN-OS 1.x MDS 9000 Switches http://secunia.com/product/3214/ Cisco...

[SA17554] Sun Solaris in.iked ISAKMP IKE Message Processing Denial of Service

TITLE: Sun Solaris in.iked ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17554 VERIFY ADVISORY: http://secunia.com/advisories/17554/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Sun Solaris 10 http://secunia.com/product/4813/ Sun Solaris ...

[SA17566] StoneGate Firewall and VPN ISAKMP IKE Message Processing Denial of Service

TITLE: StoneGate Firewall and VPN ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17566 VERIFY ADVISORY: http://secunia.com/advisories/17566/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Stonesoft StoneGate VPN Client http://secunia.com/product/143...

CVE-2005-3241

Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service memory consumption via unspecified vectors in the 1 ISAKMP, 2 FC-FCS, 3 RSVP, and 4 ISIS LSP dissector...

CVE-2005-3241

Summary: CVE-2005-3241 affects Ethereal 0.10.12 and earlier. The vulnerability involves memory-exhaustion denial of service in the FC-FCS, RSVP, and ISIS-LSP dissectors (and related disclosures across other dissectors). The Debian, Gentoo, OpenVAS, Red Hat, and SLES advisories in the connected do...

PT-2005-4055 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.12 and earlier Description: The issue allows remote attackers to cause a denial of service, specifically memory consumption, via unspecified vectors in several dissectors, including ISAKMP, FC-FCS, RSVP, and ISIS LSP...

Fedora Core 4 : ethereal-0.10.13-1.FC4.2 (2005-1011)

Ethereal 0.10.13 fixes the following issues : The ISAKMP dissector could exhaust system memory. CVE-2005-3241 Fixed in: r15163 Bug IDs: none Versions affected: 0.10.11 to 0.10.12. The FC-FCS dissector could exhaust system memory. CVE-2005-3241 Fixed in: r15204 Bug IDs: 312 Versions affected: 0.9....

Fedora Core 3 : ipsec-tools-0.5-2.fc3 (2005-217)

This update fixes a potential DoS in parsing ISAKMP headers in racoon. CVE-2005-0398 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2002-2117

Microsoft Windows XP is affected by CVE-2002-2117, where remote attackers can cause a denial of service (CPU consumption) by flooding UDP port 500 (ISAKMP). The Red Hat and NVD entries describe the same impact. No concrete remediation or patch details are provided in the connected documents; PT-2...

FreeBSD : tcpdump ISAKMP payload handling remote denial-of-service (f8551668-de09-4d7b-9720-f1360929df07)

Chad Loder has discovered vulnerabilities in tcpdump's ISAKMP protocol handler. During an audit to repair these issues, Bill Fenner discovered some related problems. These vulnerabilities may be used by an attacker to crash a running tcpdump' process. They can only be triggered if the -v' command...

CVE-2005-1802

Nortel VPN Router aka Contivity allows remote attackers to cause a denial of service crash via an IPsec IKE packet with a malformed ISAKMP header...

Nortel VPN routers DoS

IKE packets with malformed ISAKMP header lead to crash or reboot...

CVE-2005-1802

Nortel VPN Router aka Contivity allows remote attackers to cause a denial of service crash via an IPsec IKE packet with a malformed ISAKMP header...

CVE-2005-1058

Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2 negotiations...

CVE-2004-0369

The CVE-2004-0369 entry describes a buffer overflow in the Entrust LibKmp ISAKMP library, used by Symantec Enterprise Firewall 7.0–8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5. The underlying flaw allows remote attackers to execute arbitrary code via a crafted I...

CVE-2004-0369

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload...

CVE-2005-1058

Cisco IOS 12.2T, 12.3 and 12.3T contain an ISAKMP/XAUTH processing flaw: if XAUTH attributes in the ISAKMP profile are not fully processed after Phase 1, a remote attacker can bypass XAUTH and proceed to Phase 2 negotiations, potentially gaining access to private resources. Affected functionality...

CVE-2005-1058

Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2 negotiations...

USN-107-1: racoon vulnerability

Sebastian Krahmer discovered a Denial of Service vulnerability in the racoon daemon. By sending specially crafted ISAKMP packets, a remote attacker could trigger a buffer overflow which caused racoon to crash. This update does not introduce any source code changes affecting the ipsec-tools packag...