398 matches found
SUSE-SA:2005:020: ipsec-tools
The remote host is missing the patch for the advisory SUSE-SA:2005:020 ipsec-tools. Racoon is a ISAKMP key management daemon used in IPsec setups. Sebastian Krahmer of the SUSE Security Team audited the daemon and found that it handles certain ISAKMP messages in a slightly wrong way, so that remo...
Mandrake Linux Security Advisory : ipsec-tools (MDKSA-2005:062)
A bug was discovered in the way that the racoon daemon handled incoming ISAKMP requests. It is possible that an attacker could crash the racoon daemon by sending a specially crafted ISAKMP packet. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Networ...
ipsec-tools KAME racoon Daemon ISAKMP Header Parsing Remote DoS
The remote IPSEC server seems to have a problem negotiating malformed ISAKMP packets. An attacker may use this flaw to crash the remote host repeatedly and disable your VPN remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17655; scriptversion"1.21";...
GLSA-200503-33 : IPsec-Tools: racoon Denial of Service
The remote host is affected by the vulnerability described in GLSA-200503-33 IPsec-Tools: racoon Denial of Service Sebastian Krahmer has reported a potential remote Denial of Service vulnerability in the ISAKMP header parsing code of racoon. Impact : An attacker could possibly cause a Denial of...
CVE-2005-0398
The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service crash via malformed ISAKMP packets...
CVE-2005-0398
CVE-2005-0398 affects the racoon daemon in ipsec-tools prior to 0.5. A remote attacker can send malformed ISAKMP packets that trigger a crash, causing a denial of service. The issue is documented in multiple advisories (e.g., Fedora, Ubuntu USN-107-1, Gentoo GLSA) and Red Hat/FreeBSD/OpenVAS entr...
CVE-2005-0398
Removed by vendor...
Moderate: Red Hat Security Advisory: ipsec-tools security update
An updated ipsec-tools package that fixes a bug in parsing of ISAKMP headers is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel. The...
CVE-2005-0398
The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service crash via malformed ISAKMP packets...
CVE-2005-0398
The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service crash via malformed ISAKMP packets...
racoon -- remote denial-of-service
Sebastian Krahmer discovered that the racoon ISAKMP daemon could be crashed with a maliciously crafted UDP packet. No authentication is required in order to perform the attack...
Cisco VPN Concentrator ISAKMP Packet Remote DoS (Bug ID CSCdy38035)
Binary data 2248.prm...
Cisco VPN Concentrator ISAKMP Packet Remote DoS (Bug ID CSCdy38035)
Binary data 2246.prm...
Cisco VPN Concentrator ISAKMP PAcket Remote DoS (Bug ID CSCdy38035)
Binary data 2247.prm...
CVE-2004-0040
Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet...
CVE-2003-0108
CVE-2003-0108 affects tcpdump versions 3.6 to 3.7.1, where the ISAKMP parser can be triggered by a malformed ISAKMP packet to UDP port 500, causing tcpdump to enter an infinite loop and race CPU resources. The vulnerability is documented across multiple advisories (e.g., Red Hat, Debian, SUSE, Ma...
CVE-2003-0108
isakmpsubprint in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service CPU consumption via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop...
CVE-2003-0108
isakmpsubprint in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service CPU consumption via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop...
GLSA-200404-03 : Tcpdump Vulnerabilities in ISAKMP Parsing
The remote host is affected by the vulnerability described in GLSA-200404-03 Tcpdump Vulnerabilities in ISAKMP Parsing There are two specific vulnerabilities in tcpdump, outlined in reference 1 . In the first scenario, an attacker may send a specially crafted ISAKMP Delete packet which causes...
