Targeted Attack Uses Heartbleed to Hijack VPN Sessions

A targeted attack against an unnamed organization exploited the Heartbleed OpenSSL vulnerability to hijack web sessions conducted over a virtual private network connection. Incident response and forensics firm Mandiant shared some details on a recent investigation of an incident that began April ...

Private Keys Stolen from OpenVPN Using Heartbleed

You can add OpenVPN to the growing list of products and services vulnerable to the Heartbleed OpenSSL vulnerability. Worse, researchers have been able to chain together exploits to steal private keys from traffic moving through the open source virtual private network software package. A Swedish V...

Cisco SSL VPN Bruteforce Login Utility

This module scans for Cisco SSL VPN web login portals and performs login brute force to identify valid credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco SSL VPN Bruteforce Logi...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20140409-asa)

The remote Cisco ASA device is affected by one or more of the following vulnerabilities : - An issue exists in the Adaptive Security Device Manager ADSM due to improper privilege assignment to users with a privilege level of zero. This issue allows an authenticated, remote attacker to gain...

CVE-2014-0612

Unspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12.1X44-D26, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, and 12.1X46 before 12.1X46-D10, when Dynamic IPsec VPN is configured, allows remote attackers to cause a denial of service new Dynamic...

Design/Logic Flaw

Unspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12.1X44-D26, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, and 12.1X46 before 12.1X46-D10, when Dynamic IPsec VPN is configured, allows remote attackers to cause a denial of service new Dynamic...

CVE-2014-0612

Unspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12.1X44-D26, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, and 12.1X46 before 12.1X46-D10, when Dynamic IPsec VPN is configured, allows remote attackers to cause a denial of service new Dynamic...

CVE-2014-0612

CVE-2014-0612 affects Juniper Junos OS when Dynamic IPsec VPN is enabled. A DoS condition allows remote attackers to cause new Dynamic VPN connections to fail and to induce high CPU/disk usage. Affected Junos versions include 11.4R10-S1, 11.4R11, 12.1X44 pre-D26 and pre-D30, 12.1X45 pre-D20, and ...

Cisco ASA软件SSL VPN功能身份验证绕过漏洞

No description provided by source...

Cisco Adaptive Security Appliance SSL VPN远程权限提升漏洞

Bugtraq ID:66748 CVE ID:CVE-2014-2127 Cisco ASA 5500系列自适应安全设备是用于提供安全和VPN服务的模块化平台，可提供防火墙、IPS、anti-X和VPN服务。 Cisco Adaptive Security Appliance ASA Software 8.25.48之前版本、8.32.40之前版本、8.47.9之前版本、8.61.13之前版本、9.04.1之前版本、9.14.3之前版本在SSL VPN门户连接中的权限验证时，没有正确处理管理会话信息，这可使经过身份验证的远程用户通过建立无客户端SSL...

Juniper JunOS SRX服务网关动态VPN连接拒绝服务漏洞

CVE ID:CVE-2014-0612 Juniper JunOS SRX Branch Series Service Gateways是系列服务网关动态服务架构产品。 Juniper JunOS SRX Branch Series Service Gateways在动态VPN连接的实现上存在错误，这可导致未授权访问及拒绝服务攻击。 0 Juniper Networks JunOS SRX Branch Series Service Gateways 12.x Juniper Networks JunOS SRX Branch Series Service Gateways 11.x...

Juniper Junos SRX Series Dynamic IPsec VPN DoS (JSA10620)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability related to the Dynamic IPsec VPN service. A remote, unauthenticated attacker can exploit this vulnerability to cause new Dynamic VPN connections to fail for other users ...

Comtrend CT 5361T Password Disclosure

Author: TUNISIAN CYBER + Exploit Title: Comtrend CT 5361T Password Disclosure Vulnerability + Date: 07-04-2014 + Category: WebApp + Tested on: Windows 7 Pro + Vendor: http://www.comtrend.com/ + Product:...

Cisco Patches DoS, VPN Issues, Looking Into Heartbleed Impact

Cisco patched four different vulnerabilities this week in one of its core operating systems and is now is beginning to look into the potential impact of this week’s Heartbleed vulnerability in at least 60 of its other products. The patches, released yesterday, fix problems in the company’s Adapti...

CVE-2014-2128

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.3 before 8.32.40, 8.4 before 8.47.3, 8.6 before 8.61.13, 9.0 before 9.03.8, and 9.1 before 9.13.2 allows remote attackers to bypass authentication via 1 a crafted cookie value within modified HTTP...

Authentication flaw

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.3 before 8.32.40, 8.4 before 8.47.3, 8.6 before 8.61.13, 9.0 before 9.03.8, and 9.1 before 9.13.2 allows remote attackers to bypass authentication via 1 a crafted cookie value within modified HTTP...

Information disclosure

Cisco Adaptive Security Appliance ASA Software 8.x before 8.25.48, 8.3 before 8.32.40, 8.4 before 8.47.9, 8.6 before 8.61.13, 9.0 before 9.04.1, and 9.1 before 9.14.3 does not properly process management-session information during privilege validation for SSL VPN portal connections, which allows...

CVE-2014-2127

CVE-2014-2127 affects Cisco ASA SSL VPN privilege escalation via improper handling of management-session information during privilege validation in SSL VPN portal connections. A remote authenticated user can gain privileges by establishing a Clientless SSL VPN session and supplying crafted URLs. ...

CVE-2014-2128

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.3 before 8.32.40, 8.4 before 8.47.3, 8.6 before 8.61.13, 9.0 before 9.03.8, and 9.1 before 9.13.2 allows remote attackers to bypass authentication via 1 a crafted cookie value within modified HTTP...

CVE-2014-2127

Cisco Adaptive Security Appliance ASA Software 8.x before 8.25.48, 8.3 before 8.32.40, 8.4 before 8.47.9, 8.6 before 8.61.13, 9.0 before 9.04.1, and 9.1 before 9.14.3 does not properly process management-session information during privilege validation for SSL VPN portal connections, which allows...