Debian DSA-1804-1 : ipsec-tools - NULL pointer dereference, memory leaks

Several remote vulnerabilities have been discovered in racoon, the Internet Key Exchange daemon of ipsec-tools. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1574 Neil Kettle discovered a NULL pointer dereference on crafted fragmented packets that...

[Full-disclosure] [ MDVSA-2009:114 ] ipsec-tools

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:114 http://www.mandriva.com/security/ Package : ipsec-tools Date : May 18, 2009 Affected: Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Multiple memory leaks in Ipsec-tools before 0.7.2 allo...

ipsec-tools: multiple memory leaks fixed in 0.7.2

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

IPSec-Tools Memory Leakage Vulnerability

This host is installed with IPSec-Tools for Linux and is prone to Memory Leakage Vulnerability. OpenVAS Vulnerability Test $Id: secpodipsec-toolsmemoryleakagevuln.nasl 5055 2017-01-20 14:08:39Z teissa $ IPSec-Tools Memory Leakage Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009...

CVE-2009-1632

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

Design/Logic Flaw

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

CVE-2009-1632

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

CVE-2009-1632

CVE-2009-1632 affects ipsec-tools up to version 0.7.1 (before 0.7.2). The vulnerability involves multiple memory leaks in the racoon daemon, caused by issues in (1) signature verification during X.509 authentication (eay_check_x509sign in src/racoon/crypto_openssl.c) and (2) NAT-Traversal keepali...

CVE-2009-1632

Removed by vendor...

CVE-2009-1632

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

CVE-2009-1632: Undefined Security Weakness

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

Solaris 5.4 (sparc) : 105237-09

SunScreen EFS 1.1: miscellaneous fixes including NAT. Date this patch was last updated by Sun : Sep/09/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the 1 Mobile IP NAT Traversal feature and 2 Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service input queue wedge and interface outage via MIPv6 packets, aka Bug ID CSCsm97220...

Input validation

Multiple unspecified vulnerabilities in the home agent HA implementation in the 1 Mobile IP NAT Traversal feature and 2 Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service input queue wedge and interface outage via an ICMP packet, aka Bug ID...

CVE-2009-0634

Multiple unspecified vulnerabilities in the home agent HA implementation in the 1 Mobile IP NAT Traversal feature and 2 Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service input queue wedge and interface outage via an ICMP packet, aka Bug ID...

CVE-2009-0633: Undefined Security Weakness

Multiple unspecified vulnerabilities in the 1 Mobile IP NAT Traversal feature and 2 Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service input queue wedge and interface outage via MIPv6 packets, aka Bug ID CSCsm97220...

CVE-2009-0634: Undefined Security Weakness

Multiple unspecified vulnerabilities in the home agent HA implementation in the 1 Mobile IP NAT Traversal feature and 2 Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service input queue wedge and interface outage via an ICMP packet, aka Bug ID...

Cisco Security Advisory: Cisco IOS Software Mobile IP and Mobile IPv6 Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Mobile IP and Mobile IPv6 Vulnerabilities Advisory ID: cisco-sa-20090325-mobileip http://www.cisco.com/warp/public/707/cisco-sa-20090325-mobileip.shtml Revision 1.0 For Public Release 2009 March 25 1600 UTC...

UPnP Internet Gateway Device (IGD) Protocol Detection

According to its UPnP data, the remote device is a NAT router which supports the Internet Gateway Device IGD Standardized Device Control Protocol. Therefore, the device is potentially vulnerable as the protocol can allow an adjacent attacker to punch holes in your firewall e.g., via a malicious...

UPnP Internet Gateway Device (IGD) External IP Address Reachable

According to its UPnP data, the remote device is a NAT router which supports the Internet Gateway Device IGD Standardized Device Control Protocol. Nessus was able to retrieve the external IP address of the device. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid35708;...