openswan: IKE invalid key length allows remote unauthenticated user to crash openswan

Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service NULL pointer dereference and pluto IKE daemon crash via an ISAKMP message with an invalid KEYLENGTH attribute, which is not properly handled by the error handling function...

CVE-2011-0651

Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value...

Buffer overflow

Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value...

CVE-2011-0651

CVE-2011-0651 concerns Icon Labs Iconfidant SSL Server prior to 1.3.0, where a buffer overflow in the key exchange path can allow remote code execution. The vulnerability is triggered by a crafted client master key packet in which the sum of unspecified length fields exceeds a certain value, enab...

CVE-2011-0651

Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value...

Icon Labs Iconfidant SSL Server Key Length Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Icon Labs Iconfidant SSL Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the functionality responsible for key exchange. If the sum of specific...

Ubuntu Update for nss vulnerabilities USN-1007-1

Ubuntu Update for Linux kernel vulnerabilities USN-1007-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10071.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for nss vulnerabilities USN-1007-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1007-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS / 10.10 : nss vulnerabilities (USN-1007-1)

Richard Moore discovered that NSS would sometimes incorrectly match an SSL certificate which had a Common Name that used a wildcard followed by a partial IP address. While it is very unlikely that a Certificate Authority would issue such a certificate, if an attacker were able to perform a...

OpenSSL ssl3_get_key_exchange Use-After-Free Memory Corruption (CVE-2010-2939)

OpenSSL is an open-source library that implements Secure Sockets Layer SSL and Transport Layer Security TLS protocol functionality. A memory corruption vulnerability has been reported in OpenSSL library. The vulnerability is due to an error in ssl3getkeyexchange function while handling server key...

Novell NetWare OpenSSH Buffer Overflow

The Secure Shell SSH protocol is a well-established method of secure communication in a client and server architectural model. SSH is based on the idea of a public key exchange, where a server offers a client its public key. The client then uses this key to encrypt all communication between the t...

Cisco IOS Software Internet Key Exchange Resource Exhaustion Vulnerability - Cisco Systems

Cisco IOS devices that are configured for Internet Key Exchange IKE protocol and certificate based authentication are vulnerable to a resource exhaustion attack. Successful exploitation of this vulnerability may result in the allocation of all available Phase 1 security associations SA and preven...

Vulnerabilities in the Internet Key Exchange Xauth Implementation - Cisco Systems

Cisco Internetwork Operating System IOS Software release trains 12.2T, 12.3 and 12.3T may contain vulnerabilities in processing certain Internet Key Exchange IKE Xauth messages when configured to be an Easy VPN Server. Successful exploitation of these vulnerabilities may permit an unauthorized us...

DEBIAN-CVE-2010-2628

The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted 1 certificate or 2 identity data that triggers buffer overflows...

freeSSHd 1.0.9 - Key Exchange Algorithm String Buffer Overflow (Metasploit)

$Id: freesshdkeyexchange.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

FreeSSHD 1.2.4 Buffer Overflow Denial Of Service

!/usr/bin/env python """ Exploit Title: FreeSSHD 1.2.4 Remote Buffer Overflow DoS Date: 22-03-2010 Author: Pi3rrot - tagazok At gmail D0t com ak37@freenode Software Link: http://www.freesshd.com/ Version: 1.2.4 Tested on: Windows XP SP3 fr Explications : This pof just may crash FreeSSHD 1.2.4 on...

freeSSHd 1.2.4 - Denial of Service

freeSSHd 1.2.4 - Denial of Service !/usr/bin/env python """ Exploit Title: FreeSSHD 1.2.4 Remote Buffer Overflow DoS Date: 22-03-2010 Author: Pi3rrot - tagazok At gmail D0t com ak37@freenode Software Link: http://www.freesshd.com/ Version: 1.2.4 Tested on: Windows XP SP3 fr Explications : This po...

freeSSHd 1.2.4 - Denial of Service

!/usr/bin/env python """ Exploit Title: FreeSSHD 1.2.4 Remote Buffer Overflow DoS Date: 22-03-2010 Author: Pi3rrot - tagazok At gmail D0t com ak37@freenode Software Link: http://www.freesshd.com/ Version: 1.2.4 Tested on: Windows XP SP3 fr Explications : This pof just may crash FreeSSHD 1.2.4 on...

FreeFTPd 1.0.10 Key Exchange Algorithm String Buffer Overflow

This module exploits a simple stack buffer overflow in FreeFTPd 1.0.10 This flaw is due to a buffer overflow error when handling a specially crafted key exchange algorithm string received from an SSH client. This module is based on MC's freesshdkeyexchange exploit. This module requires Metasploit...

SSH Key Exchange Init Corruption

This module sends a series of SSH requests with a corrupted initial key exchange payload. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SSH Key Exchange Init Corruption', 'Description' = %q...