PT-2010-1810

Name of the Vulnerable Software and Affected Versions Cisco Secure Desktop CSD affected versions not specified Description The issue concerns Cisco Secure Desktop CSD when used with an AnyConnect SSL VPN server. It does not properly verify, allowing local users to bypass intended policy...

PT-2010-5157

Name of the Vulnerable Software and Affected Versions OpenConnect versions prior to 2.23 Description The issue allows remote AnyConnect SSL VPN servers to cause a denial of service, resulting in an application crash, by sending a 404 HTTP status code. Recommendations For versions prior to 2.23,...

PT-2010-1809

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect SSL VPN trial client on Linux affected versions not specified Description The issue allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files. Recommendations At the moment, there is n...

CVE-2009-5007: Improper Link Resolution Before File Access

The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files...

CVE-2009-5008: Undefined Security Weakness

Cisco Secure Desktop CSD, when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file...

Barracuda Networks Multiple Products 'view_help.cgi' Directory Traversal Vulnerability

Multiple Barracuda Networks products are prone to a directory- traversal vulnerability because it fails to sufficiently sanitize user- supplied input. A remote attacker can exploit this vulnerability using directory- traversal characters '../' to access files that contain sensitive information th...

Cisco Security Advisory: Cisco IOS SSL VPN Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco IOS SSL VPN Vulnerability Advisory ID: cisco-sa-20100922-sslvpn http://www.cisco.com/warp/public/707/cisco-sa-20100922-sslvpn.shtml Revision 1.0 For Public Release 2010 September 22 1600 UTC GMT -...

CVE-2010-2836

Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service memory consumption by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID...

Memory corruption

Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service memory consumption by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID...

CVE-2010-2836

CVE-2010-2836 describes a memory leak in Cisco IOS SSL VPN when HTTP port redirection is enabled. A remote attacker can exploit this by disconnecting SSL sessions, causing sessions to linger in CLOSE_WAIT and eventual memory exhaustion, potentially denying service to new connections. Affected sof...

Cisco Releases Security Advisories

Cisco has released six security advisories to address vulnerabilities affecting the Cisco IOS Software and the Cisco Unified Communications Manager. Exploitation of these vulnerabilities may allow an attacker to cause a denial-of-service condition. US-CERT encourages users and administrators to...

CVE-2010-2836: Undefined Security Weakness

Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service memory consumption by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID...

Cisco IOS SSL VPN Vulnerability

Cisco IOS® Software contains a vulnerability when the Cisco IOS SSL VPN feature is configured with an HTTP redirect. Exploitation could allow a remote, unauthenticated user to cause a memory leak on the affected devices, that could result in a memory exhaustion condition that may cause device...

SonicWALL SSL VPN End Point Interrogator Installer ActiveX Control

SonicWALL SSL VPN provides secure remote access to mission-critical resources from any endpoint including desktops, laptops, PDAs and smartphones. SonicWALL SSL VPN is bundled with a number of ActiveX controls such as, EPInstaller End Point Installer and EPInterrogator End Point Interrogator, tha...

SonciWALL Aventail epi.dll AuthCredential Format String Exploit

$Id: aventailepiactivex.rb 10078 2010-08-20 11:36:50Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

NSOADV-2010-005: SonicWALL E-Class SSL-VPN ActiveX Control format string overflow

-------------------------- NSOADV-2010-005 --------------------------- SonicWALL E-Class SSL-VPN ActiveX Control format string overflow 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11...

SonicWALL SSL-VPN ActiveX format string vulnerability

End-Point Interrogator/Installer ActiveX format string vulnerability in AuthCredential method...

SonicWALL E-Class SSL-VPN ActiveX Control Format String Overflow

-------------------------- NSOADV-2010-005 --------------------------- SonicWALL E-Class SSL-VPN ActiveX Control format string overflow 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11...

SonicWALL E-Class SSL-VPN - ActiveX Control Format String Overflow

SonicWALL E-Class SSL-VPN - ActiveX Control Format String Overflow -------------------------- NSOADV-2010-005 --------------------------- SonicWALL E-Class SSL-VPN ActiveX Control format string overflow 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 1110110...

SonicWALL E-Class SSL-VPN - ActiveX Control Format String Overflow

-------------------------- NSOADV-2010-005 --------------------------- SonicWALL E-Class SSL-VPN ActiveX Control format string overflow 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11...