Cisco Security Advisory: Vulnerabilities in Cisco IOS Secure Shell Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================= Vulnerabilities in Cisco IOS Secure Shell Server ================================================ Revision 1.0 For Public Release 2005 April 06 1600 UTC GMT -...

security flaw

Multiple buffer overflows in the dissecta11radius function in the CDMA A11 3G-A11 dissector packet-3g-a11.c for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values...

Multiple Ehereal sniffer bugs

Buffer overflow during parsing of CDMA 2000 RADIUS authentication. Buffer overflow on IAPP parsing...

CVE-2005-0699

Multiple buffer overflows in the dissecta11radius function in the CDMA A11 3G-A11 dissector packet-3g-a11.c for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values...

CVE-2005-0699

Multiple buffer overflows in the dissecta11radius function in the CDMA A11 3G-A11 dissector packet-3g-a11.c for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values...

CVE-2005-0699

Multiple buffer overflows in the dissecta11radius function in the CDMA A11 3G-A11 dissector packet-3g-a11.c for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values...

PT-2005-1739 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.9 and earlier Description: The issue is related to multiple buffer overflows in the dissect a11 radius function in the CDMA A11 3G-A11 dissector. This allows remote attackers to execute arbitrary code via RADIUS...

CVE-2004-1459

The CVE refers to Cisco Secure Access Control Server (ACS) 3.2 when configured as a Light EAP (LEAP) RADIUS proxy. The vulnerability allows remote attackers to trigger a denial of service (device crash) by sending certain LEAP authentication requests. The available documents confirm the affected ...

DEBIAN-CVE-2004-0960

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service core dump via malformed USR vendor-specific attributes VSA that cause a memcpy operation with a -1 argument...

DEBIAN-CVE-2004-0961

Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service memory exhaustion via a series of Access-Request packets with 1 Ascend-Send-Secret, 2 Ascend-Recv-Secret, or 3 Tunnel-Password attributes...

CVE-2004-1340

Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pamradiusauth.conf set to be world-readable, which allows local users to obtain sensitive information...

CVE-2004-1340

Summary: CVE-2004-1340 affects the libpam-radius-auth package on Debian GNU/Linux 3.0, where the accompanying pam_radius_auth.conf was installed world-readable, potentially exposing secrets to all local users. The issue is Debian-specific (CAN-2004-1340) and was addressed in Debian security advis...

[SECURITY] [DSA 659-1] New libpam-radius-auth packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 659-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 659-1] New libpam-radius-auth packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 659-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26th, 2005 http://www.debian.org/security/faq -...

CVE-2004-1340

Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pamradiusauth.conf set to be world-readable, which allows local users to obtain sensitive information...

DEBIAN-CVE-2004-1340

Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pamradiusauth.conf set to be world-readable, which allows local users to obtain sensitive information...

CVE-2004-1340

Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pamradiusauth.conf set to be world-readable, which allows local users to obtain sensitive information...

Debian DSA-659-1 : libpam-radius-auth - information leak, integer underflow

Two problems have been discovered in the libpam-radius-auth package, the PAM RADIUS authentication module. The Common Vulnerabilities and Exposures Project identifies the following problems : - CAN-2004-1340 The Debian package accidentally installed its configuration file /etc/pamradiusauth.conf...

CVE-2005-0108

Apache modauthradius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service crash via a RADIUSREPLYMESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument...

CVE-2005-0108

CVE-2005-0108 is a vulnerability in Apache mod_auth_radius and the libpam-radius-auth PAM module. The Debian and related advisories describe an integer underflow in the mod_auth_radius component that can be triggered by a crafted RADIUS_REPLY_MESSAGE, potentially allowing remote attackers to caus...