2360 matches found
CVE-2002-2223
Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 large number of payloads, or 3 a long payload...
Mulbiple bugs in different SSH2 realizations
Differeng bugs on malformed packets processing during keys exchange...
Multiple vendors' SSH transport layer protocol implementations contain vulnerabilities in key exchange and initialization
Overview Secure shell SSH transport layer protocol implementations from different vendors contain multiple vulnerabilities in code that handles key exchange and initialization. Both SSH servers and clients are affected. A remote attacker could execute arbitrary code with the privileges of the SSH...
CVE-2002-0852
Buffer overflows in Cisco Virtual Private Network VPN Client 3.5.4 and earlier allows remote attackers to cause a denial of service via 1 an Internet Key Exchange IKE with a large Security Parameter Index SPI payload, or 2 an IKE packet with a large number of valid payloads...
CVE-2002-0852
Buffer overflows in Cisco Virtual Private Network VPN Client 3.5.4 and earlier allows remote attackers to cause a denial of service via 1 an Internet Key Exchange IKE with a large Security Parameter Index SPI payload, or 2 an IKE packet with a large number of valid payloads...
CVE-2002-0852: Undefined Security Weakness
Buffer overflows in Cisco Virtual Private Network VPN Client 3.5.4 and earlier allows remote attackers to cause a denial of service via 1 an Internet Key Exchange IKE with a large Security Parameter Index SPI payload, or 2 an IKE packet with a large number of valid payloads...
Multiple vendors' Internet Key Exchange (IKE) implementations do not properly handle IKE response packets
Overview Internet Key Exchange IKE implementations from several vendors contain buffer overflows and denial-of-service conditions. The buffer overflow vulnerabilities could permit an attacker to execute arbitrary code on a vulnerable system. Description The CERT/CC has received a report describin...
CVE-2001-0903: Undefined Security Weakness
Linear key exchange process in High-bandwidth Digital Content Protection HDCP System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication...
Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (1)
Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service 1 // source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard...
Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (1)
// source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard which is used with the IPSec standard. IKE contributes to the IPSec...
CVE-2001-0951
Windows 2000 allows remote attackers to cause a denial of service CPU consumption by flooding Internet Key Exchange IKE UDP port 500 with packets that contain a large number of dot characters...
Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (2)
Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service 2 source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard...
Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (2)
source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard which is used with the IPSec standard. IKE contributes to the IPSec standard...
Много дырок в ssh (ssh1, ssh2, openssh)
Проблемы с перезаписью памяти, проблемы с обменом ключей, позволяющие перехватить сеансовый ключ...
Nortel CES (3DES version) offers false sense of security when using IPSEC
Short summary: Nortel Networks Contivity Extranet Switch CES has a weakness in it's IPSEC key exchange when using 3DES encryption. The 3DES encryption keys are encrypted using single DES during initial key exchange thus reducing cryptographic strength to 56-bit DES level. The weakness affects bot...
[SECURITY] [DSA 027-1] New OpenSSH packages released
---------------------------------------------------------------------------- Debian Security Advisory DSA-027-1 [email protected] http://www.debian.org/security/ Martin Schulze February 8, 2001 - ---------------------------------------------------------------------------- Package : openssh...
Дырка в GNUPG
Если письмо содержит несколько подписанных частей, то проверяется целостность лишь последей части. Кроме того, программа производит обмен приватным ключем с сервером и некорректно проверяются сигнатуры файлов...
