516 matches found
Nortel VPN client weak encryption
Cleartext password is stored in memory...
CVE-2005-0346
SafeNet SoftRemote VPN Client stores the VPN password pre-shared key in cleartext in memory of the IreIKE.exe process, which allows local users to gain sensitive information if they have access to that process...
[Full-Disclosure] SafeNet SoftRemote VPN Client Issue: Clear-text password stored in memory
SafeNet SoftRemote VPN Client Issue: Clear-text password stored in memory Summary: NTA Monitor have discovered a password disclosure issue in the SafeNet SoftRemote VPN client: The SoftRemote client stores the password in an obfuscated form in the Windows registry, but it also stores the...
CVE-2004-1105
Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information...
CVE-2004-1105
Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information...
Nortel Networks Contivity VPN Client information leakage vulnerability
Name: User Account Enumeration in Nortel Contivity VPN Vendor: Nortel Networks Products Affected: Nortel Networks Contivity VPN Client Type: Remote User Account Enumeration Severity: Medium I. Overview The Nortel Networks Contivity VPN Client authentication error message provides more information...
Nortel Networks Contivity VPN Client information leakage vulnerability
Overview The Nortel Networks Contivity VPN Client authentication error message provide additional information that may be useful to an attacker. Description The Nortel Networks Contivity VPN Client software provides an encrypted and authenticated VPN connection from a client system to a Nortel...
CVE-2002-1447
Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative privileges via a long profile name in a connect argument...
CVE-2002-1104
Cisco Virtual Private Network VPN Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service crash via TCP packets with source and destination ports of 137 NETBIOS...
CVE-2002-1107
Affected software: Cisco VPN Client (2.x.x and 3.x before 3.5.2B). Issue: inadequate randomness in generated numbers. Impact: may enable spoofing or related attacks as described in CVE-2002-1107. Status in provided documents: no explicit exploit details or remediation version are listed; no addit...
CVE-2002-1106
Cisco Virtual Private Network VPN Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks...
CVE-2002-1107
Cisco Virtual Private Network VPN Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing...
CVE-2002-1447
The CVE-2002-1447 issue affects the UNIX VPN Client’s vpnclient executable. A buffer overflow is triggered by a long profile name in the connect argument, allowing local users to obtain administrative privileges. Affected product/version is VPN Client prior to 3.5.2. Remediation: upgrade to versi...
Cisco PIX multiple bugs
SNMPv3 message causes device to reboot. If device is configured as VPN client and another VPN client connects IPSec tunnel may be broken during IKE phase...
CVE-2002-1491
The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges...
CVE-2002-0853
Cisco Virtual Private Network VPN Client 3.5.4 and earlier allows remote attackers to cause a denial of service CPU consumption via a packet with a zero-length payload...
CVE-2002-1104
Cisco Virtual Private Network VPN Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service crash via TCP packets with source and destination ports of 137 NETBIOS...
CVE-2002-1108
Cisco Virtual Private Network VPN Client software 2.x.x, and 3.x before 3.6Rel, when configured with all tunnel mode, can be forced into acknowledging a TCP packet from outside the tunnel...
CVE-2002-1106
Cisco Virtual Private Network VPN Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks...