Vulnerability Note VU#261869

Vulnerability Note VU261869 Clientless SSL VPN products break web browser domain-based security models Overview Clientless SSL VPN products from multiple vendors operate in a way that breaks fundamental browser security mechanisms. An attacker could use these devices to bypass authentication or...

CVE-2009-4118

The StartServiceCtrlDispatcher function in the cvpnd service cvpnd.exe in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERRORFAILEDSERVICECONTROLLERCONNECT error, which allows local users to cause a denial of service service crash and VPN connection loss via a manual...

CVE-2009-4118

The StartServiceCtrlDispatcher function in the cvpnd service cvpnd.exe in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERRORFAILEDSERVICECONTROLLERCONNECT error, which allows local users to cause a denial of service service crash and VPN connection loss via a manual...

Cisco VPN Client on Windows Service Control Manager DoS

The version of the Cisco VPN client installed on the remote host reportedly has a local denial of service vulnerability. The 'StartServiceCtrlDispatcher' function of the 'cvpnd' service is implemented improperly. Attempting to run 'cvpnd.exe' from the command line causes the service to stop. A...

KLA10108 DoS vulnerability in Cisco VPN client

Improper error handling was found in Cisco VPN Client. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally at a point related to the cvpnd service via cvpnd.exe manipulations. Original advisories Cisco bulletin Related products...

Cisco VPN Client - Integer Overflow Denial of Service

/ Cisco VPN client version 5.0.03.0560 Cisco VPN client Version 5.0.04.0300 Cisco VPN client Version 5.0.05.0290 Cisco VPN client Version 4.8.02.0010 / / Cisco VPN Client 0day Integer overflow DOS Proof Of Concept Code By Alex Hernandez aka alt3kx c November 2009 This POC is only for test. If an...

Cisco VPN Client for Windows 'StartServiceCtrlDispatche' Local Denial of Service Vulnerability

Cisco VPN Client for Windows is prone to a local denial-of-service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Security Advisory: Transport Layer Security Renegotiation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Transport Layer Security Renegotiation Vulnerability Advisory ID: cisco-sa-20091109-tls http://www.cisco.com/warp/public/707/cisco-sa-20091109-tls.shtml Revision 1.0 For Public Release 2009 November 9 1600 UTC GMT Summary...

SafeNet SoftRemote策略文件处理栈溢出漏洞

BUGTRAQ ID: 36907 CVE ID: CVE-2009-3861 SoftRemote是SafeNET VPN产品系列中的VPN客户端。 SoftRemote在处理策略文件（spd）时存在栈溢出漏洞，用户受骗打开了设置有超长TREENAME或GROUPNAME字段的策略文件就可以触发这个溢出，导致执行任意代码。 SafeNet SoftRemote 10.8.5 Build 2 SafeNet SoftRemote 10.3.5 Build 6 厂商补丁： SafeNet ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

TheGreenBow IPSec VPN Client Denial Of Service Vulnerability

TheGreenBow IPSec VPN Client is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Null pointer dereference

The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer size of 0...

TheGreenBow VPN Client tgbvpn.sys Local DoS Exploit

No description provided by source. Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilcodecave.wordpress.com http://evilfingers.com http://malwareAnalytics.com under construction Release Date: 15/08/20...

TheGreenBow VPN Client tgbvpn.sys Local DoS Exploit

Exploit for unknown platform in category dos / poc =================================================== TheGreenBow VPN Client tgbvpn.sys Local DoS Exploit =================================================== Author: Giuseppe 'Evilcry' Bonfa' Release Date: 15/08/2009...

TheGreenBow VPN Client - tgbvpn.sys Local Denial of Service

TheGreenBow VPN Client - tgbvpn.sys Local Denial of Service Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilcodecave.wordpress.com http://evilfingers.com http://malwareAnalytics.com under constructi...

TheGreenBow VPN Client - 'tgbvpn.sys' Local Denial of Service

Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilcodecave.wordpress.com http://evilfingers.com http://malwareAnalytics.com under construction Release Date: 15/08/2009...

TheGreenBow VPN Client tgbvpn.sys DoS and Potential Local

Original Advisory Link: https://www.evilfingers.com/advisory/Advisory/TheGreenBowVPNClienttgbvpn.sysDoS.php ++++++++++++++++++++++++++++++++++++++++++++++++++++ -----------TheGreenBow VPN Client tgbvpn.sys DoS and Potential Local Privilege Escalation--------- Author: Giuseppe 'Evilcry' Bonfa'...

TheGreenBow VPN Denial Of Service

Original Advisory Link: https://www.evilfingers.com/advisory/Advisory/TheGreenBowVPNClienttgbvpn.sysDoS.php ++++++++++++++++++++++++++++++++++++++++++++++++++++ -----------TheGreenBow VPN Client tgbvpn.sys DoS and Potential Local Privilege Escalation--------- Author: Giuseppe 'Evilcry' Bonfa'...

SafeNet SoftRemote IKE服务远程栈溢出漏洞

BUGTRAQ ID: 35154 SoftRemote是SafeNET VPN产品系列中的VPN客户端。 Softremote中默认监听于UDP 62514端口上的VPN服务（ireIke.exe）存在栈溢出漏洞。如果远程攻击者向该服务提交了超长请求的话，就可以触发这个溢出，导致以SYSTEM权限执行任意代码。 SafeNet SoftRemote 10.8.6 厂商补丁： SafeNet ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.safenet-inc.com/products/vpn/softRemote.asp...

SEC Consult SA-20090525-4 :: SonicOS Format String Vulnerability

SEC Consult Security Advisory 20090525-4 ========================================================================== title: SonicOS Format String Vulnerability program: SonicWALL Global VPN Client vulnerable version: PRO 4100 SonicOS 4.0.0.2-51e Standard and Enhanced possibly other versions...

SEC Consult SA-20090525-3 :: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability

SEC Consult Security Advisory 20090525-3 ========================================================================== title: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability program: SonicWALL Global VPN Client vulnerable version: Global VPN Client = 4.0.0.835 possibly other...