CVE-2015-3966

The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before 8.1.7 allows remote authenticated users to cause a denial of service VPN service restart by leveraging a peer relationship to send a crafted configuration with compression...

CVE-2015-3966

CVE-2015-3966 affects Innominate mGuard devices running firmware 8.x prior to 8.1.7. The vulnerability exists in the IPsec SA establishment process and can be triggered by a peer sending a crafted configuration with compression, leading to a denial-of-service (VPN service restart). Affected firmw...

Researchers Uncover Chinese VPN Service Used by APT Crews for Cover

Building a business can be expensive and time-consuming, and owners will look for ways to save money wherever they can. Researchers from RSA Security have found a VPN provider in China that is taking this to an unusual extreme: hacking Windows servers around the world for use as VPN nodes on a...

OpenVPN Patches Denial of Service Vulnerability

An update for OpenVPN released on Monday patches a serious denial of service vulnerability present in the open source VPN software since 2005. “It is also possible that even older versions are affected,” OpenVPN said in its advisory, clarifying that the flaw affects primarily OpenVPN 2.x versions...

Apple Mac OS X <= 10.4.9 - VPND Local Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24208/info Apple Mac OS X's VPN service daemon is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function...

ASUS AiCloud Enabled Routers 12 Models - Authentication bypass and Sensitive file/path disclosure

ASUS routers, which are enabled with the AiCloud service SSL ports, are vulnerable to bypass of authentication and sensitive file disclosure. This vulnerability has been observed in all firmware versions, though the latest version increases the complexity of the attack. By sending a special craft...

Juniper NetScreen VPN Client Multiple Buffer Overflow Vulnerabilities

The remote host is running a version of Juniper NetScreen VPN client that is affected by multiple buffer overflow vulnerabilities : - The IKE VPN service listening on UDP port 62514 is vulnerable to a stack overflow vulnerability that can be triggered by sending specially crafted packets...

Full Disclosure ASUS Wireless Routers Ten Models - Multiple Vulnerabilities on AiCloud enabled units

Note: In June I released a partial disclosure for just the RT-N66U on the issue of directory traversal. I have only heard back from ASUS a twice on the issue, and I understand they are working on a fix. However, no serious attempt to our knowledge has been made to warn their customers in the...

ASUS RT-N66U Directory Traversal

Vulnerable product: ASUS RT-N66U when HTTPS WebService via AiCloud is enabled AC66R and RT-N65U are effected as well, but need more testing Vulnerabilities: - Linux 2.6.22 - Researched on both 3.0.0.4.270 and 3.0.0.4.354 firmware - Full directory traversal and plain text disclosure of all sensiti...

New VPN Flaw Can Expose Users' IP Addresses

Researchers have identified a bug in the way that some third-party VPN services use the PPTP protocol over IPv6, a problem that enables eavesdroppers to unmask the specific IP addresses of the VPN service’s users. The vulnerability, which was disclosed at a conference in Sweden last week, only...

Apple Mac OSX 10.4.9 - VPND Local Format String

Apple Mac OSX 10.4.9 - VPND Local Format String source: https://www.securityfocus.com/bid/24208/info Apple Mac OS X's VPN service daemon is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a...

CVE-2006-4411

The CVE-2006-4411 issue affects Apple Mac OS X VPN service in 10.3.x up to 10.3.9 and 10.4.x up to 10.4.8. The root cause is that the VPN service does not properly clean the environment when executing commands, which can allow a local user to gain system privileges via unspecified vectors. Exploi...

Cisco VPN 3000 Concentrator <= 4.1.7, 4.7.2 (FTP) Remote Exploit

Exploit for hardware platform in category remote exploits ================================================================ Cisco VPN 3000 Concentrator = 4.1.7, 4.7.2 FTP Remote Exploit ================================================================ / Cisco VPN Concentrator 3000 FTP remote exploi...

Novell Bordermanager VPN Service denial-of-service vulnerability

Overview A vulnerability exists in the Novell Bordermanager VPN service that could allow a remote attacker to cause a denial of service. Description The Novell Bordermanager product includes Virtual Private Network VPN capabilities, including support for the standard Internet Key Exchange IKE...

L2TP Network Server Detection

The report host understands the L2TP tunneling protocol and appears to be a VPN endpoint, or more specifically, an L2TP Network Server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11387; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate",...

Watchguard Firebox DoS

Specially crafted data sent to TCP/4110 causes Dynamic VPN Configuration Protocol service to crash...

PPTP Detection

The remote host is running a PPTP Point-to-Point Tunneling Protocol server. It allows users to set up a tunnel between their host and the network the remote host is attached to. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10622; scriptversion "1.26";...