CVE-2008-1198

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key PSK hash...

CVE-2008-1198

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key PSK hash...

CVE-2008-1198

CVE-2008-1198 is tied to initscripts in Red Hat Enterprise Linux 3–5 where the default IPsec ifup script configures racoon to use aggressive IKE mode instead of main IKE mode. This configuration allows remote attackers to brute-force or sniff an unencrypted preshared key (PSK) hash, potentially l...

Debian Security Advisory DSA 1299-1 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory DSA 1299-1. OpenVAS Vulnerability Test $Id: deb12991.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1299-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1299-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-965-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : ipsec-tools (ZYPP Patch Number 3099)

A bug in the IKE daemon 'racoon' allowed remote attackers shut down established tunnels. CVE-2007-1841 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29466;...

Ubuntu 5.10 / 6.06 LTS / 6.10 : ipsec-tools vulnerability (USN-450-1)

A flaw was discovered in the IPSec key exchange server 'racoon'. Remote attackers could send a specially crafted packet and disrupt established IPSec tunnels, leading to a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

openSUSE 10 Security Update : ipsec-tools (ipsec-tools-3098)

A bug in the IKE daemon 'racoon' allowed remote attackers shut down established tunnels CVE-2007-1841. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ipsec-tools-3098. The text description of...

Fedora Core 6 : ipsec-tools-0.6.5-8.fc6 (2007-665)

Mon Apr 23 2007 Steve Grubb - 0.6.5-8 - Upstream fix for Racoon DOS, informational delete must be encrypted - Resolves: rhbz235388 - CVE-2007-1841 ipsec-tools racoon DoS - Fri Apr 20 2007 Steve Grubb - 0.6.5-7 - Resolves: 218386 labeled ipsec does not work over loopback - Mon Apr 16 2007 Steve...

[SECURITY] Fedora Core 6 Update: ipsec-tools-0.6.5-8.fc6

This is the IPsec-Tools package. You need this package in order to really use the IPsec functionality in the linux-2.5+ kernels. This package builds: - setkey, a program to directly manipulate policies and SAs - racoon, an IKEv1 keying daemon...

Moderate: ipsec-tools security update

0.6.5-8 - Upstream fix for Racoon DOS, informational delete must be encrypted - Resolves: rhbz235388 - CVE-2007-1841 ipsec-tools racoon DoS 0.6.5-7 - Resolves: 218386 labeled ipsec does not work over loopback 0.6.5-6.6 - Related: 232508 add auditing to racoon 0.6.5-6.5 - Resolves: 235680 racoon...

Debian DSA-1299-1 : ipsec-tools - missing input sanitising

It was discovered that a specially crafted packet sent to the racoon ipsec key exchange server could cause a tunnel to crash, resulting in a denial of service. The oldstable distribution sarge isn't affected by this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

DSA-1299-1 ipsec-tools

Bulletin has no description...

RHEL 5 : ipsec-tools (RHSA-2007:0342)

Updated ipsec-tools packages that fix a denial of service flaw in racoon are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionali...

ipsec security update

CentOS Errata and Security Advisory CESA-2007:0342 Updated ipsec-tools packages that fix a denial of service flaw in racoon are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools packag...

ipsec-tools racoon DoS

The isakmpinforecv function in src/racoon/isakmpinf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service tunnel crash via crafted 1 DELETE ISAKMPNPTYPED and 2 NOTIFY ISAKMPNPTYPEN messages...

Moderate: Red Hat Security Advisory: ipsec-tools security update

Updated ipsec-tools packages that fix a denial of service flaw in racoon are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionali...

Racoon IPSec key exchange DoS

It's possible to disrupts established IPSec tunnels...

[USN-450-1] ipsec-tools vulnerability

=========================================================== Ubuntu Security Notice USN-450-1 April 09, 2007 ipsec-tools vulnerability CVE-2007-1841 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 Ubuntu 6.06 LTS Ubunt...