Integer underflow vulnerability in isakmpd "Certificate Request Payload" handling

Overview A vulnerability exists in the isakmpd that could allow a remote attacker to cause a denial of service. Description The OpenBSD isakmpd establishes security associations for encrypted and authenticated IPsec network traffic. It implements the Internet Security Association and Key Manageme...

FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling

Background FreeS/WAN, Openswan, strongSwan and Super-FreeS/WAN are Open Source implementations of IPsec for the Linux operating system. They are all based on the discontinued FreeS/WAN project. Description All these IPsec implementations have several bugs in the verifyx509cert function, which...

PT-2004-1352 · Tcpdump · Tcpdump

Name of the Vulnerable Software and Affected Versions: tcpdump versions 3.8.1 and earlier Description: The issue allows remote attackers to cause a denial of service crash via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read. This has bee...

Roger Wilco Server 1.4.1 - UDP Datagram Handling Denial of Service

Roger Wilco Server 1.4.1 - UDP Datagram Handling Denial of Service source: https://www.securityfocus.com/bid/10022/info Roger Wilco Server has been reported prone to a remote denial of service vulnerability. The issue is reported to exist due to a flaw when handling malicious UDP payloads that ar...

MS Internet Explorer Object Data Remote Exploit (M03-032)

CVE-ID：CVE-2003-0701CNNVD-ID：CNNVD-200308-125漏洞影响范围：•Microsoft Internet Explorer 5.01 •Microsoft Internet Explorer 5.5 •Microsoft Internet Explorer 6.0 •Microsoft Internet Explorer 6.0 for Windows Server 2003 解决方案：官方已发布升级补丁，请立即升级到最新版本。 titleby malware M03-032 Exploit/title script language=vbs...

CVE-2002-2223

Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 large number of payloads, or 3 a long payload...

CVE-2002-2224

Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 large number of...

CVE-2002-2222

isakmpd/message.c in isakmpd in FreeBSD before isakmpd-200204031, and in OpenBSD 3.1, allows remote attackers to cause a denial of service crash by sending Internet Key Exchange IKE payloads out of sequence...