Mulbiple bugs in different SSH2 realizations

Differeng bugs on malformed packets processing during keys exchange...

Multiple vendors' SSH transport layer protocol implementations contain vulnerabilities in key exchange and initialization

Overview Secure shell SSH transport layer protocol implementations from different vendors contain multiple vulnerabilities in code that handles key exchange and initialization. Both SSH servers and clients are affected. A remote attacker could execute arbitrary code with the privileges of the SSH...

CVE-2002-0852

Buffer overflows in Cisco Virtual Private Network VPN Client 3.5.4 and earlier allows remote attackers to cause a denial of service via 1 an Internet Key Exchange IKE with a large Security Parameter Index SPI payload, or 2 an IKE packet with a large number of valid payloads...

CVE-2002-0852

Buffer overflows in Cisco Virtual Private Network VPN Client 3.5.4 and earlier allows remote attackers to cause a denial of service via 1 an Internet Key Exchange IKE with a large Security Parameter Index SPI payload, or 2 an IKE packet with a large number of valid payloads...

Multiple vendors' Internet Key Exchange (IKE) implementations do not properly handle IKE response packets

Overview Internet Key Exchange IKE implementations from several vendors contain buffer overflows and denial-of-service conditions. The buffer overflow vulnerabilities could permit an attacker to execute arbitrary code on a vulnerable system. Description The CERT/CC has received a report describin...

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (1)

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service 1 // source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard...

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (1)

// source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard which is used with the IPSec standard. IKE contributes to the IPSec...

CVE-2001-0951

Windows 2000 allows remote attackers to cause a denial of service CPU consumption by flooding Internet Key Exchange IKE UDP port 500 with packets that contain a large number of dot characters...

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (2)

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service 2 source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard...

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (2)

source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard which is used with the IPSec standard. IKE contributes to the IPSec standard...

Много дырок в ssh (ssh1, ssh2, openssh)

Проблемы с перезаписью памяти, проблемы с обменом ключей, позволяющие перехватить сеансовый ключ...

Nortel CES (3DES version) offers false sense of security when using IPSEC

Short summary: Nortel Networks Contivity Extranet Switch CES has a weakness in it's IPSEC key exchange when using 3DES encryption. The 3DES encryption keys are encrypted using single DES during initial key exchange thus reducing cryptographic strength to 56-bit DES level. The weakness affects bot...

[SECURITY] [DSA 027-1] New OpenSSH packages released

---------------------------------------------------------------------------- Debian Security Advisory DSA-027-1 [email protected] http://www.debian.org/security/ Martin Schulze February 8, 2001 - ---------------------------------------------------------------------------- Package : openssh...

Дырка в GNUPG

Если письмо содержит несколько подписанных частей, то проверяется целостность лишь последей части. Кроме того, программа производит обмен приватным ключем с сервером и некорректно проверяются сигнатуры файлов...

Microsoft security advisory: Updated support for Diffie-Hellman Key Exchange

None None...