Debian Security Advisory DSA 2789-1 (strongswan - Denial of service and authorization bypass)

A vulnerability has been found in the ASN.1 parser of strongSwan, an IKE daemon used to establish IPsec protected links. By sending a crafted IDDERASN1DN ID payload to a vulnerable pluto or charon daemon, a malicious remote user can provoke a denial of service daemon crash or an authorization...

Cisco Adaptive Security Appliance Software Clientless SSL VPN Rewriter Denial of Service Vulnerability

A vulnerability in the clientless SSL VPN feature of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to cause an affected system to reload. The vulnerability is due to a stack overflow while browsing internal resources via the clientless SSL VPN portal...

Major Companies Fall Victim to Social Engineering

The annual Social Engineering Capture the Flag contest held during DEF CON may seem on the surface to be just an opportunity for pen-testers and hackers to flex their pretexting muscles. But if you’re one of the 10 major technology, manufacturing and critical infrastructure organizations targeted...

Cryptoseal VPN Service shuts down over legal concerns after Lavabit case

Yet another American Internet privacy service has bitten the dust, prompted by fears about broad government surveillance demands. CryptoSeal, a Virtual private network VPN based in California has decided to shutter its privacy-conscious service rather than hand over its encryption keys to the U.S...

Cryptoseal VPN Service shuts down over legal concerns after Lavabit case

None...

Cisco ASA VPN Denial of Service Vulnerability

A vulnerability in the VPN authentication code that handles parsing of the username from the certificate on the Cisco ASA firewall could allow an unauthenticated, remote attacker to cause a reload of the affected device. The vulnerability is due to parallel processing of a large number of Interne...

CVE-2013-5544

The VPN authentication functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service device reload by sending many username-from-cert IKE requests, aka Bug ID CSCua91108...

Authentication flaw

The VPN authentication functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service device reload by sending many username-from-cert IKE requests, aka Bug ID CSCua91108...

CVE-2013-5544

CVE-2013-5544 affects Cisco ASA Software VPN authentication, specifically the parsing of the username-from-cert during IKE. The issue can be exploited remotely by sending a high volume of IKE requests to a device configured with username-from-cert, causing a denial of service via device reload. R...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20131009-asa)

The remote Cisco ASA device is affected by one or more of the following vulnerabilities : - A denial of service vulnerability exists due to improper clearing of unused memory blocks after an AnyConnect SSL VPN client disconnects. CVE-2013-3415 - A denial of service vulnerability exists resulting...

SpecView Directory Traversal

Overview This advisory is a follow up to the original alert titled ICS-ALERT-12-214-01 SpecView Directory Traversal that was published August 01, 2012, on the ICS-CERT Web. This advisory provides mitigation details for a vulnerability, which impacts SpecView products. Independent researcher Luigi...

CVE-2013-5515

The Clientless SSL VPN feature in Cisco Adaptive Security Appliance ASA Software 8.x before 8.25.44, 8.3.x before 8.32.39, 8.4.x before 8.45.7, 8.6.x before 8.61.12, 9.0.x before 9.02.6, and 9.1.x before 9.11.7 allows remote attackers to cause a denial of service device reload via crafted HTTPS...

CVE-2013-5507

The IPsec implementation in Cisco Adaptive Security Appliance ASA Software 9.1 before 9.11.7, when an IPsec VPN tunnel is enabled, allows remote attackers to cause a denial of service device reload via a 1 ICMP or 2 ICMPv6 packet that is improperly handled during decryption, aka Bug ID CSCue18975...

CVE-2013-5510

The remote-access VPN implementation in Cisco Adaptive Security Appliance ASA Software 7.x before 7.25.12, 8.x before 8.25.46, 8.3.x before 8.32.39, 8.4.x before 8.46, 8.6.x before 8.61.12, 9.0.x before 9.03.1, and 9.1.x before 9.12.5, when an override-account-disable option is enabled, does not...

Authentication flaw

The remote-access VPN implementation in Cisco Adaptive Security Appliance ASA Software 7.x before 7.25.12, 8.x before 8.25.46, 8.3.x before 8.32.39, 8.4.x before 8.46, 8.6.x before 8.61.12, 9.0.x before 9.03.1, and 9.1.x before 9.12.5, when an override-account-disable option is enabled, does not...

Information disclosure

Cisco Adaptive Security Appliance ASA Software 8.4.x before 8.43 and 8.6.x before 8.61.3 does not properly manage memory upon an AnyConnect SSL VPN client disconnection, which allows remote attackers to cause a denial of service memory consumption, and forwarding outage or system hang via packets...

Authentication flaw

The SSL implementation in Cisco Adaptive Security Appliance ASA Software 9.0 before 9.02.6 and 9.1 before 9.12 allows remote attackers to bypass authentication, and obtain VPN access or administrative access, via a crafted X.509 client certificate, aka Bug ID CSCuf52468...

CVE-2013-5515

CVE-2013-5515 affects Cisco ASA Software Clientless SSL VPN. The issue arises from improper handling of crafted HTTPS requests, enabling remote attackers to cause a denial of service (device reload). Affected software ranges from ASA 8.x through 9.1.x, with fixed releases per Bug CSCua22709: 8.2(...

CVE-2013-3415

Cisco Adaptive Security Appliance ASA Software 8.4.x before 8.43 and 8.6.x before 8.61.3 does not properly manage memory upon an AnyConnect SSL VPN client disconnection, which allows remote attackers to cause a denial of service memory consumption, and forwarding outage or system hang via packets...

CVE-2013-5507

The IPsec implementation in Cisco Adaptive Security Appliance ASA Software 9.1 before 9.11.7, when an IPsec VPN tunnel is enabled, allows remote attackers to cause a denial of service device reload via a 1 ICMP or 2 ICMPv6 packet that is improperly handled during decryption, aka Bug ID CSCue18975...