ike-scan (NASL wrapper)

ike-scan NASL wrapper This plugin runs ike-scan to identify IPSEC VPN endpoints. It will attempt to enumerate supported cipher suites, bruteforce valid groupnames and fingerprint any endpoint identified. OpenVAS Vulnerability Test $Id: ike-scan.nasl 7153 2017-09-15 15:03:32Z cfischer $ Descriptio...

CentOS 3 / 4 / 5 : ipsec-tools (CESA-2008:0849)

An updated ipsec-tools package that fixes two security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionalit...

RHEL 3 / 4 / 5 : ipsec-tools (RHSA-2008:0849)

An updated ipsec-tools package that fixes two security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionalit...

ipsec security update

CentOS Errata and Security Advisory CESA-2008:0849 An updated ipsec-tools package that fixes two security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The ipsec-tools package...

Important: Red Hat Security Advisory: ipsec-tools security update

An updated ipsec-tools package that fixes two security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionalit...

ipsec-tools: racoon orphaned ph1s memory leak

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" phase 1 handle when it has been initiated remotely, which allows remote attackers to cause a denial of service resource consumption...

ipsec-tools: racoon memory leak caused by invalid proposals

Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service memory consumption via invalid proposals...

CVE-2008-3652

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" phase 1 handle when it has been initiated remotely, which allows remote attackers to cause a denial of service resource consumption...

Memory corruption

Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service memory consumption via invalid proposals...

Authentication flaw

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" phase 1 handle when it has been initiated remotely, which allows remote attackers to cause a denial of service resource consumption...

CVE-2008-3651

Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service memory consumption via invalid proposals...

CVE-2008-3652

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" phase 1 handle when it has been initiated remotely, which allows remote attackers to cause a denial of service resource consumption...

CVE-2008-3651

Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service memory consumption via invalid proposals...

CVE-2008-3652

Removed by vendor...

CVE-2008-3652

CVE-2008-3652 is described in the connected MiracleLinux advisory as a vulnerability in ipsec-tools’ racoon daemon where an remote-initiated phase 1 handle (ph1) is not removed, enabling a denial of service via resource consumption. The affected component is the racoon part of ipsec-tools; the ro...

CVE-2008-3652

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" phase 1 handle when it has been initiated remotely, which allows remote attackers to cause a denial of service resource consumption...

CVE-2008-3651

Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service memory consumption via invalid proposals...

CVE-2008-3651

CVE-2008-3651 is a memory-leak DoS flaw in the ipsec-tools racoon daemon. Affected component: racoon/proposal.c in ipsec-tools up to version 0.7.1. Root cause: memory leaks that can be triggered by invalid proposals, allowing remote authenticated users to exhaust memory and cause a denial of serv...

CVE-2008-3651

Removed by vendor...

PT-2008-1042 · Ipsec Tools +1 · Ipsec-Tools +1

Name of the Vulnerable Software and Affected Versions: ipsec-tools versions prior to 0.7.1 ipsec-tools version 0.3.3 ipsec-tools version 0.2.5 Description: The issue is related to multiple vulnerabilities in the ipsec-tools package, which can lead to a disruption of protected information...