CVE-2002-2224

Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 large number of...

CVE-2002-2223

The CVE-2002-2223 entry concerns a buffer overflow in NetScreen-Remote 8.0. An attacker could trigger a denial of service and, possibly, remote code execution by sending crafted Internet Key Exchange (IKE) response packets. The exploit vectors involve (1) a large Security Parameter Index (SPI) fi...

CVE-2002-2222

The CVE-2002-2222 entry involves isakmpd in FreeBSD (before isakmpd-20020403_1) and OpenBSD 3.1, where isakmpd/message.c accepts IKE payloads out of sequence, enabling remote attackers to trigger a denial of service (crash). Affected component: isakmpd (isakmpd/message.c). Root cause: improper ha...

FreeSSHd 1.0.9 Key Exchange Algorithm String Buffer Overflow

This module exploits a simple stack buffer overflow in FreeSSHd 1.0.9. This flaw is due to a buffer overflow error when handling a specially crafted key exchange algorithm string received from an SSH client. This module requires Metasploit: https://metasploit.com/download Current source:...

[SECURITY] [DSA 1175-1] New isakmpd packages fix replay protection bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 1175-1 [email protected] http://www.debian.org/security/ Noah Meyerhans September 13th, 2006 http://www.debian.org/security/faq -...

DSA-1175-1 isakmpd

Bulletin has no description...

CVE-2006-3906

CVE-2006-3906 describes a DoS in the IKEv1 implementation on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls. The root cause is improper handling of large volumes of IKE Phase-1 requests, leading to resource exhaustion and degraded availability. Exploitation is possible without valid credent...

RE: [Full-disclosure] Cisco VPN Concentrator IKE resource exhaustionDoS Advisory

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello: This is a Cisco PSIRT response to an advisory published by an unaffiliated third party, Roy Hills, of NTA Monitor Ltd posted as of July 26, 2006 at http://www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html, and entitled: Cisco VPN...

Malformed Key Exchange Init Message (CAN-2006-2407; CAN-2006-2421)

...

freeSSHd Key Exchange Algorithm String Remote Overflow

The remote host is using freeSSHd, a free SSH server for Windows. The version of freeSSHd installed on the remote host does not validate the key exchange strings sent by a SSH client. This can result in a buffer overflow and possibly a compromise of the host if an unauthenticated attacker sends a...

WeOnlyDo! Software wodSSHServer ActiveX component fails to properly validate key exchange algorithm strings

Overview The WeOnlyDo! Software wodSSHServer ActiveX component fails to properly validate the length of key exchange algorithm strings. This may allow a remote, unauthenticated attacker to execute arbitrary code. Description wodSSHServerActiveX component According to the wodSSHServer ActiveX...

FreeSSHd key exchange buffer overflow

Added: 05/17/2006 CVE: CVE-2006-2407 BID: 17958 OSVDB: 25463 Background freeSSHd is a free SSH server based on WeOnlyDo wodSSHServer. Problem wodSSHServer and its derivatives, including freeSSHd, are affected by a buffer overflow vulnerability in the key exchange algorithm. A remote attacker can...

FreeSSHd key exchange buffer overflow

Added: 05/17/2006 CVE: CVE-2006-2407 BID: 17958 OSVDB: 25463 Background freeSSHd is a free SSH server based on WeOnlyDo wodSSHServer. Problem wodSSHServer and its derivatives, including freeSSHd, are affected by a buffer overflow vulnerability in the key exchange algorithm. A remote attacker can...

FreeSSHd key exchange buffer overflow

Added: 05/17/2006 CVE: CVE-2006-2407 BID: 17958 OSVDB: 25463 Background freeSSHd is a free SSH server based on WeOnlyDo wodSSHServer. Problem wodSSHServer and its derivatives, including freeSSHd, are affected by a buffer overflow vulnerability in the key exchange algorithm. A remote attacker can...

[SA20136] FreeFTPd SFTP Key Exchange Algorithm String Buffer Overflow

TITLE: FreeFTPd SFTP Key Exchange Algorithm String Buffer Overflow SECUNIA ADVISORY ID: SA20136 VERIFY ADVISORY: http://secunia.com/advisories/20136/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: FreeFTPd 1.x http://secunia.com/product/6138/ DESCRIPTION: A...

FreeSSHd key exchange buffer overflow

Added: 05/17/2006 CVE: CVE-2006-2407 BID: 17958 OSVDB: 25463 Background freeSSHd is a free SSH server based on WeOnlyDo wodSSHServer. Problem wodSSHServer and its derivatives, including freeSSHd, are affected by a buffer overflow vulnerability in the key exchange algorithm. A remote attacker can...

Stack overflow

Stack-based buffer overflow in 1 WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including 2 FreeSSHd 1.0.9 and 3 freeFTPd 1.0.10, allows remote attackers to execute arbitrary code via a long key exchange algorithm string...

CVE-2006-2407

Stack-based buffer overflow in 1 WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including 2 FreeSSHd 1.0.9 and 3 freeFTPd 1.0.10, allows remote attackers to execute arbitrary code via a long key exchange algorithm string...

CVE-2006-2407

Stack-based buffer overflow in 1 WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including 2 FreeSSHd 1.0.9 and 3 freeFTPd 1.0.10, allows remote attackers to execute arbitrary code via a long key exchange algorithm string...

freeSSHd <= 1.0.9 Key Exchange Algorithm Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================ freeSSHd = 1.0.9 Key Exchange Algorithm Buffer Overflow Exploit ================================================================ !/usr/bin/env python """ Coded by Tauqeer Ahma...