1430 matches found
Fedora Update for strongswan FEDORA-2012-8821
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 16 : strongswan-4.6.4-1.fc16 (2012-8821)
RSA signature verification vulnerability CVE-2012-2388 Fix bug 821733 and update to new upstream version Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...
[SECURITY] Fedora 17 Update: strongswan-4.6.4-1.fc17
The strongSwan 4.6 branch supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...
[SECURITY] Fedora 16 Update: strongswan-4.6.4-1.fc16
The strongSwan 4.6 branch supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...
[BSA-073] Security Update for strongswan
Micah Anderson uploaded new packages for strongswan which fixed the following security problems: CVE-2012-2388 An authentication bypass issue was discovered by the Codenomicon CROSS project in strongSwan, an IPsec-based VPN solution. When using RSA-based setups, a missing check in the gmp plugin...
update for strongswan (important)
Strongswan's gmp plugin could treat empty RSA signature as valid ones...
SuSE 10 Security Update : strongswan (ZYPP Patch Number 8138)
This update fixed a security issue in strongswan's 'gmp' plugin which could be exploited by attackers to forge RSA signature/certificate to authenticate as any legitimate user. CVE-2012-2388 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
strongswan authentication bypass
Invalid authentication data check if gmp plugin is used...
[SECURITY] [DSA 2483-1] strongswan security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2483-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez May 31, 2012 http://www.debian.org/security/faq -...
Security fix for the ALT Linux 7 package strongswan version 4.6.4-alt1
June 1, 2012 Michael Shigorin 4.6.4-alt1 - 4.6.4 + CVE-2012-2388 is fixed an attacker presenting a forged signature and/or certificate can authenticate as any legitimate user provided that "gmp" plugin is in use and a connection definition using RSA auth exists...
Security fix for the ALT Linux 6 package strongswan version 4.6.4-alt1
June 1, 2012 Michael Shigorin 4.6.4-alt1 - 4.6.4 + CVE-2012-2388 is fixed an attacker presenting a forged signature and/or certificate can authenticate as any legitimate user provided that "gmp" plugin is in use and a connection definition using RSA auth exists...
[SECURITY] [DSA 2483-1] strongswan security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2483-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez May 31, 2012 http://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-2483-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DSA-2483-1 strongswan - authentication bypass
Bulletin has no description...
Debian Security Advisory DSA 2483-1 (strongswan)
The remote host is missing an update to strongswan announced via advisory DSA 2483-1. OpenVAS Vulnerability Test $Id: deb24831.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2483-1 strongswan Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
SuSE 11.1 Security Update : strongswan (SAT Patch Number 2790)
Remote unauthenticated attackers could cause a buffer overflow in strongswan's IKE deamon by using specially crafted certificates or identify information. Attackers could potentially exploit that to execute code. CVE-2010-2628 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
SuSE 10 Security Update : strongswan (ZYPP Patch Number 6529)
The previous fix for a flaw in the ASN.1 parser was incomplete and had to be reworked. CVE-2009-2661 This could lead to crashes of the pluto IKE daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
strongSwan Certificate and Identification Payload Parsing Buffer Overflow (CVE-2010-2628)
strongSwan is an open-source implementation of IPsec for Linux platforms including Debian, Ubuntu, FreeBSD and Mac OS X. It is a scalable VPN solution that supports the Internet Key Exchange IKE protocol version 1 as well as IKEv2. A remote code execution vulnerability has been reported in...
CVE-2010-2628
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted 1 certificate or 2 identity data that triggers buffer overflows...
CVE-2010-2628
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted 1 certificate or 2 identity data that triggers buffer overflows...