Racoon IPSec key exchange DoS

It's possible to disrupts established IPSec tunnels...

[USN-450-1] ipsec-tools vulnerability

=========================================================== Ubuntu Security Notice USN-450-1 April 09, 2007 ipsec-tools vulnerability CVE-2007-1841 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 Ubuntu 6.06 LTS Ubunt...

CVE-2007-1841

The isakmpinforecv function in src/racoon/isakmpinf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service tunnel crash via crafted 1 DELETE ISAKMPNPTYPED and 2 NOTIFY ISAKMPNPTYPEN messages...

Design/Logic Flaw

The isakmpinforecv function in src/racoon/isakmpinf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service tunnel crash via crafted 1 DELETE ISAKMPNPTYPED and 2 NOTIFY ISAKMPNPTYPEN messages...

CVE-2007-1841

The isakmpinforecv function in src/racoon/isakmpinf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service tunnel crash via crafted 1 DELETE ISAKMPNPTYPED and 2 NOTIFY ISAKMPNPTYPEN messages...

CVE-2007-1841

Removed by vendor...

CVE-2007-1841

CVE-2007-1841 affects ipsec-tools’ racoon daemon, where the function isakmp_info_recv in racoon/src/racoon/isakmp_inf.c can be triggered by crafted DELETE (ISAKMP_NPTYPE_D) or NOTIFY (ISAKMP_NPTYPE_N) messages to cause a denial of service (tunnel crash). Affected releases are ipsec-tools prior to...

CVE-2007-1841

The isakmpinforecv function in src/racoon/isakmpinf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service tunnel crash via crafted 1 DELETE ISAKMPNPTYPED and 2 NOTIFY ISAKMPNPTYPEN messages...

USN-450-1: ipsec-tools vulnerability

A flaw was discovered in the IPSec key exchange server "racoon". Remote attackers could send a specially crafted packet and disrupt established IPSec tunnels, leading to a denial of service...

CentOS 3 / 4 : ipsec-tools (CESA-2006:0267)

Updated ipsec-tools packages that fix a bug in racoon are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel and includes racoon, an IKE...

RHEL 3 / 4 : ipsec-tools (RHSA-2006:0267)

Updated ipsec-tools packages that fix a bug in racoon are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel and includes racoon, an IKE...

ipsec security update

CentOS Errata and Security Advisory CESA-2006:0267 Updated ipsec-tools packages that fix a bug in racoon are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec...

security flaw

The Internet Key Exchange version 1 IKEv1 implementation isakmpagg.c in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service null dereference and crash via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for...

Moderate: Red Hat Security Advisory: ipsec-tools security update

Updated ipsec-tools packages that fix a bug in racoon are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel and includes racoon, an IKE...

Code injection

The Internet Key Exchange version 1 IKEv1 implementation isakmpagg.c in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x before 20060119, certain FreeBSD releases, and possibly other distributions of BSD or Linux operating systems, when running in aggressive mode, allows remote...

[SECURITY] [DSA 965-1] New ipsec-tools packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 965-1 [email protected] http://www.debian.org/security/ Martin Schulze February 6th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 965-1] New ipsec-tools packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 965-1 [email protected] http://www.debian.org/security/ Martin Schulze February 6th, 2006 http://www.debian.org/security/faq -...

DSA-965-1 ipsec-tools - null dereference

Bulletin has no description...

Ubuntu 4.10 / 5.04 / 5.10 : ipsec-tools vulnerability (USN-221-1)

The Oulu University Secure Programming Group discovered a remote Denial of Service vulnerability in the racoon daemon. When the daemon is configured to use aggressive mode, then it did not check whether the peer sent all required payloads during the IKE negotiation phase. A malicious IPsec peer...

Ubuntu 4.10 : ipsec-tools vulnerability (USN-107-1)

Sebastian Krahmer discovered a Denial of Service vulnerability in the racoon daemon. By sending specially crafted ISAKMP packets, a remote attacker could trigger a buffer overflow which caused racoon to crash. This update does not introduce any source code changes affecting the ipsec-tools packag...