CVE-2008-4551

strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service daemon crash via an IKESAINIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpzexport function in the GNU Multiprecision...

Null pointer dereference

strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service daemon crash via an IKESAINIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpzexport function in the GNU Multiprecision...

CVE-2008-4551

strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service daemon crash via an IKESAINIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpzexport function in the GNU Multiprecision...

CVE-2008-4551

strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service daemon crash via an IKESAINIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpzexport function in the GNU Multiprecision...

CVE-2008-4551

strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service daemon crash via an IKESAINIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpzexport function in the GNU Multiprecision...

CVE-2008-4551

Concrete details: CVE-2008-4551 affects strongSwan 4.2.6 and earlier. The vulnerability is a denial of service (daemon crash) triggered by an IKE_SA_INIT message containing a large number of NULL values in a Key Exchange payload, which causes a NULL pointer dereference in GMP’s mpz_export return ...

strongSwan 'mpz_export()'远程拒绝服务漏洞

BUGTRAQ ID: 31291 CNCAN ID：CNCAN-2008092409 strongSwan是一款开放源代码的基于IPsec的VPN解决方案。 strongSwan 'mpzexport'函数处理存在问题，远程攻击者可以利用漏洞对IKEv2 charon守护进程进行拒绝服务攻击。 如果发送使用包含很多NULL值的KEY交换负载的IKESAINIT消息，可导致IKEv2 charon崩溃。问题是strongSwan引用使用GNU多倍精度库GMP中的mpzexport函数返回的NULL指针而触发的。 strongSwan 4.2.6 strongSwan...

Gentoo Security Advisory GLSA 200406-20 (Openswan)

The remote host is missing updates announced in advisory GLSA 200406-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200406-20 (Openswan)

The remote host is missing updates announced in advisory GLSA 200406-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

StrongSwan 2.2.0 VPN Detection

Binary data 3580.prm...

StrongSwan 2.3.0 VPN Detection

Binary data 3583.prm...

StrongSwan 2.2.2 VPN Detection

Binary data 3582.prm...

StrongSwan 2.3.1 VPN Detection

Binary data 3584.prm...

StrongSwan 2.3.2 VPN Detection

Binary data 3585.prm...

StrongSwan 2.2.1 VPN Detection

Binary data 3581.prm...

StrongSwan 2.4.0 VPN Detection

Binary data 3586.prm...

StrongSwan 2.4.1 VPN Detection

Binary data 3587.prm...

CVE-2004-0590

The CVE-2004-0590 entry affects FreeS/WAN and related IPsec implementations (OpenS/WAN, FreeS/WAN derivatives, Super-FreeS/WAN, and strongSwan). The root cause described across connected docs is bugs in the verify_x509cert() certificate validation, allowing remote attackers to authenticate using ...

FreeS/WAN, Openswan, strongSwan, Super-FreeS/WAN multiple certificate problmes

DoS, unauthorized access...

[ GLSA 200406-20 ] FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200406-20 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...