reprepro更新代码库签名验证绕过安全限制漏洞

BUGTRAQ ID: 25537 reprepro是用于处理debian软件包的本地代码库的工具。 reprepro在处理密钥交换时存在漏洞，远程攻击者可能利用此漏洞绕过验证。 在使用update命令升级代码库时reprepro只使用请求密钥验证签名，而请求密钥的签名根本不存在时也不会报告，因此会接收任何使用未知密钥签名的内容，这就导致不安全内容绕过了安全检查。 Bernhard R. Link reprepro 2.2.3 Bernhard R. Link reprepro 1.3.0-1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[USN-450-1] ipsec-tools vulnerability

=========================================================== Ubuntu Security Notice USN-450-1 April 09, 2007 ipsec-tools vulnerability CVE-2007-1841 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 Ubuntu 6.06 LTS Ubunt...

Racoon IPSec key exchange DoS

It's possible to disrupts established IPSec tunnels...

USN-450-1: ipsec-tools vulnerability

A flaw was discovered in the IPSec key exchange server "racoon". Remote attackers could send a specially crafted packet and disrupt established IPSec tunnels, leading to a denial of service...

CA eTrust Intrusion Detection System Key Exchange Remote DoS

The remote host is running CA eTrust Intrusion Detection System, a security solution with intrusion detection, antivirus, web filtering and session monitoring. The remote version of this software is affected by a denial of service vulnerability in the way it handles session keys. An attacker can...

CVE-2004-2679

CVE-2004-2679 affects Check Point Firewall-1 4.1 up to NG AI R55. The vulnerability arises when an attacker sends an Internet Key Exchange (IKE) message with a crafted Vendor ID payload, causing the firewall to reveal version information and potentially other details in its response. This is an i...

CVE-2002-2222

The CVE-2002-2222 entry involves isakmpd in FreeBSD (before isakmpd-20020403_1) and OpenBSD 3.1, where isakmpd/message.c accepts IKE payloads out of sequence, enabling remote attackers to trigger a denial of service (crash). Affected component: isakmpd (isakmpd/message.c). Root cause: improper ha...

CVE-2003-1320

SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 a large number of payloads, or 3 a long payload...

CVE-2002-2223

The CVE-2002-2223 entry concerns a buffer overflow in NetScreen-Remote 8.0. An attacker could trigger a denial of service and, possibly, remote code execution by sending crafted Internet Key Exchange (IKE) response packets. The exploit vectors involve (1) a large Security Parameter Index (SPI) fi...

CVE-2002-2223

Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 large number of payloads, or 3 a long payload...

CVE-2002-2224

Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 large number of...

CVE-2002-2225

SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly involving buffer overflows using 1 a large Security Parameter Index SPI field, 2 a large number of payloads, or 3 a long...

CVE-2002-2224

Buffer overflow in PGPFreeware 7.03 for Windows NT 4.0 SP6 can be triggered by crafted Internet Key Exchange (IKE) response packets (e.g., large SPI, many payloads, long payload), enabling remote DoS and potentially arbitrary code execution. No explicit remediation is provided in the available do...

FreeSSHd 1.0.9 Key Exchange Algorithm String Buffer Overflow

This module exploits a simple stack buffer overflow in FreeSSHd 1.0.9. This flaw is due to a buffer overflow error when handling a specially crafted key exchange algorithm string received from an SSH client. This module requires Metasploit: https://metasploit.com/download Current source:...

[SECURITY] [DSA 1175-1] New isakmpd packages fix replay protection bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 1175-1 [email protected] http://www.debian.org/security/ Noah Meyerhans September 13th, 2006 http://www.debian.org/security/faq -...

DSA-1175-1 isakmpd

Bulletin has no description...

CVE-2006-3906

CVE-2006-3906 describes a DoS in the IKEv1 implementation on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls. The root cause is improper handling of large volumes of IKE Phase-1 requests, leading to resource exhaustion and degraded availability. Exploitation is possible without valid credent...

RE: [Full-disclosure] Cisco VPN Concentrator IKE resource exhaustionDoS Advisory

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello: This is a Cisco PSIRT response to an advisory published by an unaffiliated third party, Roy Hills, of NTA Monitor Ltd posted as of July 26, 2006 at http://www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html, and entitled: Cisco VPN...

Malformed Key Exchange Init Message (CAN-2006-2407; CAN-2006-2421)

...

freeSSHd Key Exchange Algorithm String Remote Overflow

The remote host is using freeSSHd, a free SSH server for Windows. The version of freeSSHd installed on the remote host does not validate the key exchange strings sent by a SSH client. This can result in a buffer overflow and possibly a compromise of the host if an unauthenticated attacker sends a...