StrongSwan v4.5.0 - New Version

Our first post regarding strongSwan can be found here. Now, an update has been released – strongSwan v4.5.0. "strongSwan is an OpenSource IPsec implementation for the Linux operating system. It is based on the discontinued FreeS/WAN project and the X.509 patch which we developped over the last...

SuSE 10 Security Update : ethereal (ZYPP Patch Number 6628)

Update of wireshark to fix multiple vulnerabilities : - The Paltalk dissector could crash on alignment-sensitive processors. CVE-2009-3549: CVSS v2 Base Score: 5.0 MEDIUM - The DCERPC/NT dissector could crash. CVE-2009-3550: CVSS v2 Base Score: 4.3 MEDIUM - The SMB dissector could crash...

PT-2010-5007 · Freeradius · Freeradius

Name of the Vulnerable Software and Affected Versions: FreeRADIUS version 2.1.9 Description: The issue is related to the fr dhcp decode function in lib/dhcp.c, which does not properly handle the DHCP Relay Agent Information option in certain non-default builds. This can be exploited by remote...

RADIUS Authentication Bypass (cisco-sa-20050629-aaa)

Remote Authentication Dial In User Service RADIUS authentication on a device that is running certain versions of Cisco Internetworking Operating System IOS and configured with a fallback method to none can be bypassed. Systems that are configured for other authentication methods or that are not...

Vulnerabilities in Cisco IOS Secure Shell Server - Cisco Systems

Certain release trains of Cisco Internetwork Operating System IOS, when configured to use the IOS Secure Shell SSH server in combination with Terminal Access Controller Access Control System Plus TACACS+ as a means to perform remote management tasks on IOS devices, may contain two vulnerabilities...

Wireshark: various flaws in a) RADIUS, b) Bluetooth L2CAP, c) MIOP dissectors (DoS)

Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service application crash via a file that records a malformed packet trace and is processed by the 1 Bluetooth L2CAP, 2 RADIUS, or 3 MIOP dissector. NOTE: it was later reported that the RADIUS issu...

CVE-2010-0524

The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message...

Default configuration

The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message...

CVE-2010-0524

The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message...

CVE-2010-0524

CVE-2010-0524 affects the FreeRADIUS server in Apple Mac OS X Server prior to 10.6.3. The default configuration permits EAP-TLS authenticated connections based on an arbitrary client certificate, enabling a remote attacker to obtain network connectivity via a crafted RADIUS Access Request. Remedi...

CVE-2010-0524

The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message...

Debian DSA-1942-1 : wireshark - several vulnerabilities

Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2560 A NULL pointer dereference wa...

FreeRADIUS RADIUS Server rad_decode Remote Denial of Service (CVE-2009-3111)

Remote Authentication Dial In User Service RADIUS is a networking protocol that provides centralized Authentication, Authorization, and Accounting AAA services for users to connect and utilize network resources. RADIUS is a client/server protocol that runs in the application layer using the UDP...

CentOS 5 : freeradius (CESA-2009:1451)

Updated freeradius packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In...

Debian Security Advisory DSA 1942-1 (wireshark)

The remote host is missing an update to wireshark announced via advisory DSA 1942-1. OpenVAS Vulnerability Test $Id: deb19421.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1942-1 wireshark Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SuSE 11 Security Update : wireshark (SAT Patch Number 1606)

Version upgrade of wireshark fix multiple vulnerabilities : - The Paltalk dissector could crash on alignment-sensitive processors. CVE-2009-3549: CVSS v2 Base Score: 5.0 MEDIUM - The DCERPC/NT dissector could crash. CVE-2009-3550: CVSS v2 Base Score: 4.3 MEDIUM - The SMB dissector could crash...

FreeRADIUS Illegal Attributes Denial of Service (CVE-2004-0938)

The RADIUS protocol is used for the authentication, authorization and accounting of various network services. RADIUS is most often used by operating systems and hardware devices that provide network access to remote users. There is a large number of RADIUS implementations available, both commerci...

openSUSE Security Update : wireshark (wireshark-1600)

Version upgrade of wireshark fix multiple vulnerabilities : - CVE-2009-3549: CVSS v2 Base Score: 5.0 MEDIUM The Paltalk dissector could crash on alignment-sensitive processors. - CVE-2009-3550: CVSS v2 Base Score: 4.3 MEDIUM The DCERPC/NT dissector could crash. - CVE-2009-3551: CVSS v2 Base Score...

openSUSE Security Update : wireshark (wireshark-1600)

Version upgrade of wireshark fix multiple vulnerabilities : - CVE-2009-3549: CVSS v2 Base Score: 5.0 MEDIUM The Paltalk dissector could crash on alignment-sensitive processors. - CVE-2009-3550: CVSS v2 Base Score: 4.3 MEDIUM The DCERPC/NT dissector could crash. - CVE-2009-3551: CVSS v2 Base Score...

GLSA-200911-05 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200911-05 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark: Ryan Giobbi reported an integer overflow in wiretap/erf.c CVE-2009-3829. The vendor reported multiple unspecified...