Lucene search
+L

2035 matches found

Check Point Advisories
Check Point Advisories
added 2009/10/21 12:0 a.m.13 views

OpenSSH sshd Identical Blocks Denial of Service (CVE-2006-4924)

The Secure Shell SSH protocol is a well-established method of secure communication in a client and server architectural model. The protocol was developed and implemented as an alternative to the older remote connection programs, such as telnet, rsh and rlogin, which offer limited to no security...

7.8CVSS6.3AI score0.34666EPSS
Exploits1
Cisco
Cisco
added 2009/09/23 4:0 p.m.59 views

Cisco IOS Software Internet Key Exchange Resource Exhaustion Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

7.8CVSS6.2AI score0.01725EPSS
Exploits0References1
OSV
OSV
added 2009/06/08 1:0 a.m.3 views

DEBIAN-CVE-2009-1958

charon/sa/tasks/childcreate.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKEAUTH request without a 1 TSi or 2 TSr traffic selector...

5CVSS6.9AI score0.02947EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2009/05/25 12:0 a.m.24 views

Debian Security Advisory DSA 1804-1 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory DSA 1804-1. OpenVAS Vulnerability Test $Id: deb18041.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1804-1 ipsec-tools Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

5CVSS0.4AI score0.11631EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2009/05/22 12:0 a.m.30 views

Debian DSA-1804-1 : ipsec-tools - NULL pointer dereference, memory leaks

Several remote vulnerabilities have been discovered in racoon, the Internet Key Exchange daemon of ipsec-tools. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1574 Neil Kettle discovered a NULL pointer dereference on crafted fragmented packets that...

5CVSS5.2AI score0.11631EPSS
Exploits2References7
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.26 views

Mandriva Update for openssl MDVSA-2008:107 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2008:107 openssl Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

4.3CVSS0.05EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.31 views

Mandriva Update for openssl MDVSA-2008:107 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2008:107 openssl Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

4.3CVSS0.05EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/03/23 12:0 a.m.29 views

Ubuntu Update for ipsec-tools vulnerabilities USN-641-1

Ubuntu Update for Linux kernel vulnerabilities USN-641-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6411.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ipsec-tools vulnerabilities USN-641-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

7.8CVSS0.1AI score0.03435EPSS
Exploits1References2
OSV
OSV
added 2008/10/14 8:0 p.m.5 views

CVE-2008-4551

strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service daemon crash via an IKESAINIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpzexport function in the GNU Multiprecision...

6.7AI score
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2008/10/14 8:0 p.m.3 views

CVE-2008-4551

strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service daemon crash via an IKESAINIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpzexport function in the GNU Multiprecision...

5CVSS5.6AI score0.02517EPSS
Exploits0References7
Prion
Prion
added 2008/10/14 8:0 p.m.21 views

Null pointer dereference

strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service daemon crash via an IKESAINIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpzexport function in the GNU Multiprecision...

5CVSS6.7AI score0.02517EPSS
Exploits0References6Affected Software1
Debian CVE
Debian CVE
added 2008/10/14 7:0 p.m.47 views

CVE-2008-4551

strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service daemon crash via an IKESAINIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpzexport function in the GNU Multiprecision...

5CVSS5.5AI score0.02517EPSS
Exploits0
OpenVAS
OpenVAS
added 2008/08/22 12:0 a.m.27 views

FreeSSHD Key Exchange Buffer Overflow

A vulnerable version of FreeSSHd is installed on the remote host. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.71375EPSS
Exploits11References2
OpenVAS
OpenVAS
added 2008/08/22 12:0 a.m.32 views

FreeSSHD Key Exchange Buffer Overflow

A vulnerable version of FreeSSHd is installed on the remote host. Description : The version installed does not validate key exchange strings send by a SSH client. This results in a buffer overflow and possible a compromise of the host if the client is sending a long key exchange string. OpenVAS...

7.5CVSS0.4AI score0.71375EPSS
Exploits11References2
Tenable Nessus
Tenable Nessus
added 2008/08/07 12:0 a.m.21 views

PCI DSS compliance

Binary data pcicompliance.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2008/06/24 12:0 a.m.34 views

GLSA-200806-08 : OpenSSL: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200806-08 OpenSSL: Denial of Service Ossi Herrala and Jukka Taimisto of Codenomicon discovered two vulnerabilities: A double free call in the TLS server name extension CVE-2008-0891. The OpenSSL client code does not properly handl...

4.3CVSS7.3AI score0.05EPSS
Exploits1References3
Prion
Prion
added 2008/05/29 4:32 p.m.21 views

Null pointer dereference

OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service crash via a TLS handshake that omits the Server Key Exchange message and uses "particular cipher suites," which triggers a NULL pointer dereference...

4.3CVSS6.5AI score0.05EPSS
Exploits1References23Affected Software2
OSV
OSV
added 2008/05/29 4:32 p.m.3 views

DEBIAN-CVE-2008-1672

OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service crash via a TLS handshake that omits the Server Key Exchange message and uses "particular cipher suites," which triggers a NULL pointer dereference...

4.3CVSS7AI score0.05EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.24 views

Debian: Security Advisory (DSA-1175-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS7.2AI score0.01738EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.34 views

Debian Security Advisory DSA 1175-1 (isakmpd)

The remote host is missing an update to isakmpd announced via advisory DSA 1175-1. A flaw has been found in isakmpd, OpenBSD's implementation of the Internet Key Exchange protocol, that caused Security Associations to be created with a replay window of 0 when isakmpd was acting as the responder...

5CVSS0.01738EPSS
Exploits0
Rows per page
Query Builder