openSUSE 10 Security Update : ipsec-tools (ipsec-tools-6302)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

CVE-2009-2187

Multiple memory leaks in the 1 IP and 2 IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv67 through snv93, allow local users to cause a denial of service memory consumption via vectors related to the association of a DLENABMULTIREQ and b DLDISABMULTIREQ messages...

CVE-2009-2187

CVE-2009-2187 affects Sun Solaris 10 and OpenSolaris (snv_67–snv_93) where the kernel’s IP and IPv6 multicast stacks suffer memory leaks. The root cause involves leaks when processing DL_ENABMULTI_REQ and DL_DISABMULTI_REQ messages in conjunction with ARP traffic, enabling local users to cause de...

Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2009:137)

Multiple security vulnerabilities has been identified and fixed in Little cms library embedded in OpenJDK : A memory leak flaw allows remote attackers to cause a denial of service memory consumption and application crash via a crafted image file CVE-2009-0581. Multiple integer overflows allow...

Microsoft Active Directory multiple security vulnerabilities

Double free vulnerability, memory leaks...

Ubuntu: Security Advisory (USN-744-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandrake Security Advisory MDVSA-2009:120 (openssl)

The remote host is missing an update to openssl announced via advisory MDVSA-2009:120. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

FreeBSD Ports: opensll

The remote host is missing an update to the system as announced in the referenced advisory. VID 82b55df8-4d5a-11de-8811-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 82b55df8-4d5a-11de-8811-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mozilla Firefox 3.0.10 (KEYGEN) Remote Denial of Service Exploit

No description provided by source. ===8=================== Original Nachrichtentext =================== From the very-low-hanging-fruit-department Firefox Denial of Service KEYGEN Release mode: Forced release. Ref : TZO-27-2009 - Firefox Denial of Service KEYGEN WWW :...

Firefox Denial Of Service

From the very-low-hanging-fruit-department Firefox Denial of Service KEYGEN Release mode: Forced release. Ref : TZO-27-2009 - Firefox Denial of Service KEYGEN WWW : http://blog.zoller.lu/2009/04/advisory-firefox-denial-of-service.html Vendor : http://www.firefox.com Status : No patch CVE : none...

Mozilla Firefox 3.0.10 - KEYGEN Remote Denial of Service

Mozilla Firefox 3.0.10 - KEYGEN Remote Denial of Service ===8=================== Original Nachrichtentext =================== From the very-low-hanging-fruit-department Firefox Denial of Service KEYGEN Release mode: Forced release. Ref : TZO-27-2009 - Firefox Denial of Service KEYGEN WWW :...

Mozilla Firefox 3.0.10 (KEYGEN) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ================================================================ Mozilla Firefox 3.0.10 KEYGEN Remote Denial of Service Exploit ================================================================ ===8=================== Original Nachrichtentext...

[TZO-27-2009] Firefox Denial of Service (Keygen)

From the very-low-hanging-fruit-department Firefox Denial of Service KEYGEN Release mode: Forced release. Ref : TZO-27-2009 - Firefox Denial of Service KEYGEN WWW : http://blog.zoller.lu/2009/04/advisory-firefox-denial-of-service.html Vendor : http://www.firefox.com Status : No patch CVE : none...

GLSA-200905-03 : IPSec Tools: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200905-03 IPSec Tools: Denial of Service The following vulnerabilities have been found in the racoon daemon as shipped with IPSec Tools: Neil Kettle reported that racoon/isakmpfrag.c is prone to a NULL pointer dereference...

Debian Security Advisory DSA 1804-1 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory DSA 1804-1. OpenVAS Vulnerability Test $Id: deb18041.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1804-1 ipsec-tools Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1804-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1804-1 : ipsec-tools - NULL pointer dereference, memory leaks

Several remote vulnerabilities have been discovered in racoon, the Internet Key Exchange daemon of ipsec-tools. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1574 Neil Kettle discovered a NULL pointer dereference on crafted fragmented packets that...

Mandriva Linux Security Advisory : openssl (MDVSA-2009:120)

Multiple security vulnerabilities has been identified and fixed in OpenSSL : The dtls1bufferrecord function in ssl/d1pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service memory consumption via a large series of future epoch DTLS records that are...

OpenSSL multiple security vulnerabilities

Memory corruptions, memory leaks...

[SECURITY] [DSA 1804-1] New ipsec-tools packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1804-1 [email protected] http://www.debian.org/security/ Nico Golde May 20th, 2009 http://www.debian.org/security/faq -...