PT-2024-23599 · Unknown · Ros Kinetic Kame

Name of the Vulnerable Software and Affected Versions: ROS Kinetic Kame affected versions not specified Description: The issue concerns an unauthorized information access vulnerability. No specific details about the estimated number of potentially affected devices or real-world incidents are...

PT-2024-23606 · Unknown · Ros Kinetic Kame

Name of the Vulnerable Software and Affected Versions: ROS Kinetic Kame affected versions not specified Description: A buffer overflow issue has been identified. The estimated number of potentially affected devices and details about real-world incidents are not provided. Recommendations: At the...

PT-2024-23607 · Unknown · Ros Kinetic Kame

Name of the Vulnerable Software and Affected Versions: ROS Kinetic Kame affected versions not specified Description: The issue is related to an arbitrary file upload vulnerability due to insufficient file upload validation. Recommendations: At the moment, there is no information about a newer...

PT-2024-23598 · Unknown · Ros Kinetic Kame

Name of the Vulnerable Software and Affected Versions: ROS Kinetic Kame affected versions not specified Description: The issue is related to an unauthorized node injection vulnerability. The estimated number of potentially affected devices and details about real-world incidents are not provided...

PT-2024-23600 · Unknown · Ros Kinetic Kame

Name of the Vulnerable Software and Affected Versions: ROS Kinetic Kame affected versions not specified Description: A shell injection issue has been identified, specifically a Bash shell injection. The estimated number of potentially affected devices and details about real-world incidents are no...

PT-2024-23601 · Unknown · Ros Kinetic Kame

Name of the Vulnerable Software and Affected Versions: ROS Kinetic Kame affected versions not specified Description: The issue concerns information leakage and unauthorized access to sensitive data due to plaintext message transmission. Recommendations: At the moment, there is no information abou...

PT-2024-23609 · Unknown · Ros Kinetic Kame

Name of the Vulnerable Software and Affected Versions: ROS Kinetic Kame affected versions not specified Description: A remote command execution issue has been identified. The estimated number of potentially affected devices worldwide is not available. Details about real-world incidents where this...

PT-2024-23603 · Unknown · Ros Kinetic Kame

Name of the Vulnerable Software and Affected Versions: ROS Kinetic Kame affected versions not specified Description: The issue is related to an OS Command Injection Vulnerability. The estimated number of potentially affected devices worldwide is not available. There is no information about...

PT-2024-23602 · Ros · Ros

Name of the Vulnerable Software and Affected Versions: ROS Robot Operating System Kinetic Kame version 1 Description: An issue was discovered in the default configurations of ROS, allowing unauthenticated attackers to gain access using default credentials. Recommendations: For ROS Robot Operating...

KAME Racoon "Initial Contact" SA Deletion Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9417/info It has been reported that it may be possible for attackers to remotely delete security associations SAs in hosts running the KAME IKE daemon Racoon. / Sun Microsystems Solaris sysinfo Kernel Memory Disclosure...

NetBSD/FreeBSD IPComp实现栈溢出远程内存破坏漏洞

Bugtraq ID: 47123 IPcomp是一款IP有效载荷压缩协议，为IP层提供无损耗压缩。 源自NetBSD/KAME的IPComp实现，未压缩负载的注入其代码类似如下： algo = ipcompalgorithmlookupcpi; / ... / error = algo-decompressm, m-mnext, &newlen; / ... / if nxt != IPPROTODONE if inetswipprotoxnxt.prflags & PRLASTHDR != 0 && ipsec4inrejectm, NULL...

KAME IKE Daemon (racoon) INITIAL_CONTACT Improper Handling (CVE-2004-0164)

Racoon is an Internet Key Exchange IKE daemon for automatically keying IPsec connections. There exists a vulnerability in the IKE daemon of some BSD systems Such as NetBSD's racoon where sending specifically crafted IKE packets could remove an IPsec SA or all SAs. Once an attacker successfully...

IPsec-Tools多个远程拒绝服务漏洞

BUGTRAQ ID: 30657 CVECAN ID: CVE-2008-3651,CVE-2008-3652 IPsec-Tools是KAME的IPsec工具到Linux平台上的移植。 ipsec-tools的racoon守护进程的src/racoon/handler.c文件没有删除远程初始化的孤儿ph1句柄，racoon/proposal.c文件中存在内存泄露漏洞。如果远程攻击者发送了无效请求报文的话，就可能导致耗尽所有可用内存。 IPsec-Tools 0.7.1 RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2008:0849-01）以及相应补丁...

Denial of service

The mldinput function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service divide-by-zero error and panic via a malformed ICMPv6 Multicast Listener Discovery MLD query with a certain Maximum Response Del...

CVE-2008-2464

The CVE-2008-2464 issue affects NetBSD 4.0, FreeBSD, and KAME kernels with INET6 enabled, where the mld_input function in sys/netinet6/mld6.c mishandles certain ICMPv6 MLD-QUERY Maximum-Response-Delay values. This can allow remote attackers on the local link to trigger a divide-by-zero error and ...

CVE-2008-2464

The mldinput function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service divide-by-zero error and panic via a malformed ICMPv6 Multicast Listener Discovery MLD query with a certain Maximum Response Del...

FreeBSD Security Advisory (FreeBSD-SA-08:04.ipsec.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:04.ipsec.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Ports: racoon

The remote host is missing an update to the system as announced in the referenced advisory. VID 739bb51d-7e82-11d8-9645-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: racoon

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

KAME Project IPv6 IPComp头远程拒绝服务漏洞

BUGTRAQ ID: 27642 CVECAN ID: CVE-2008-0177 KAME项目是6家日本公司协作为各种BSD系统所提供的免费IPv6、IPsec和Mobile IPv6实现。 KAME项目实现的IPv6协议栈存在漏洞，远程攻击者可能利用此漏洞导致服务器不可用。 如果BSD系统使用了KAME项目的IPv6实现的话，则在处理有IPComp头的IPv6报文时kame/sys/netinet6/ipcompinput.c文件的ipcomp6input函数会出现空指针引用。如果将内核配置为处理IPsec和IPv6通讯的话，单个特制的IPv6报文可能导致内核忙碌。 FreeBSD...