Cisco IOS Software Internet Key Exchange Resource Exhaustion Vulnerability - Cisco Systems

Cisco IOS devices that are configured for Internet Key Exchange IKE protocol and certificate based authentication are vulnerable to a resource exhaustion attack. Successful exploitation of this vulnerability may result in the allocation of all available Phase 1 security associations SA and preven...

Vulnerabilities in the Internet Key Exchange Xauth Implementation - Cisco Systems

Cisco Internetwork Operating System IOS Software release trains 12.2T, 12.3 and 12.3T may contain vulnerabilities in processing certain Internet Key Exchange IKE Xauth messages when configured to be an Easy VPN Server. Successful exploitation of these vulnerabilities may permit an unauthorized us...

DEBIAN-CVE-2010-2628

The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted 1 certificate or 2 identity data that triggers buffer overflows...

freeSSHd 1.0.9 - Key Exchange Algorithm String Buffer Overflow (Metasploit)

$Id: freesshdkeyexchange.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

freeSSHd 1.2.4 - Denial of Service

!/usr/bin/env python """ Exploit Title: FreeSSHD 1.2.4 Remote Buffer Overflow DoS Date: 22-03-2010 Author: Pi3rrot - tagazok At gmail D0t com ak37@freenode Software Link: http://www.freesshd.com/ Version: 1.2.4 Tested on: Windows XP SP3 fr Explications : This pof just may crash FreeSSHD 1.2.4 on...

freeSSHd 1.2.4 - Denial of Service

freeSSHd 1.2.4 - Denial of Service !/usr/bin/env python """ Exploit Title: FreeSSHD 1.2.4 Remote Buffer Overflow DoS Date: 22-03-2010 Author: Pi3rrot - tagazok At gmail D0t com ak37@freenode Software Link: http://www.freesshd.com/ Version: 1.2.4 Tested on: Windows XP SP3 fr Explications : This po...

FreeSSHD 1.2.4 Buffer Overflow Denial Of Service

!/usr/bin/env python """ Exploit Title: FreeSSHD 1.2.4 Remote Buffer Overflow DoS Date: 22-03-2010 Author: Pi3rrot - tagazok At gmail D0t com ak37@freenode Software Link: http://www.freesshd.com/ Version: 1.2.4 Tested on: Windows XP SP3 fr Explications : This pof just may crash FreeSSHD 1.2.4 on...

FreeFTPd 1.0.10 Key Exchange Algorithm String Buffer Overflow

This module exploits a simple stack buffer overflow in FreeFTPd 1.0.10 This flaw is due to a buffer overflow error when handling a specially crafted key exchange algorithm string received from an SSH client. This module is based on MC's freesshdkeyexchange exploit. This module requires Metasploit...

SSH Key Exchange Init Corruption

This module sends a series of SSH requests with a corrupted initial key exchange payload. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SSH Key Exchange Init Corruption', 'Description' = %q...

OpenSSH sshd Identical Blocks Denial of Service (CVE-2006-4924)

The Secure Shell SSH protocol is a well-established method of secure communication in a client and server architectural model. The protocol was developed and implemented as an alternative to the older remote connection programs, such as telnet, rsh and rlogin, which offer limited to no security...

Cisco IOS Software Internet Key Exchange Resource Exhaustion Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

DEBIAN-CVE-2009-1958

charon/sa/tasks/childcreate.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKEAUTH request without a 1 TSi or 2 TSr traffic selector...

Debian Security Advisory DSA 1804-1 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory DSA 1804-1. OpenVAS Vulnerability Test $Id: deb18041.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1804-1 ipsec-tools Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1804-1 : ipsec-tools - NULL pointer dereference, memory leaks

Several remote vulnerabilities have been discovered in racoon, the Internet Key Exchange daemon of ipsec-tools. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1574 Neil Kettle discovered a NULL pointer dereference on crafted fragmented packets that...

Mandriva Update for openssl MDVSA-2008:107 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2008:107 openssl Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for openssl MDVSA-2008:107 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2008:107 openssl Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Ubuntu Update for ipsec-tools vulnerabilities USN-641-1

Ubuntu Update for Linux kernel vulnerabilities USN-641-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6411.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ipsec-tools vulnerabilities USN-641-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CVE-2008-4551

strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service daemon crash via an IKESAINIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpzexport function in the GNU Multiprecision...

CVE-2008-4551

strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service daemon crash via an IKESAINIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpzexport function in the GNU Multiprecision...

Null pointer dereference

strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service daemon crash via an IKESAINIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpzexport function in the GNU Multiprecision...