CVE-2013-3970

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...

CVE-2013-3970

CVE-2013-3970 affects Juniper Junos Pulse Secure Access Service (SSL VPN) with IVE OS 7.0r2–7.0r8 and 7.1r1–7.1r5, and Junos Pulse Access Control Service (UAC) with UAC OS 4.1r1–4.1r5. The issue involves inadvertently including an internal/test CA certificate in the Trusted Server CAs list, which...

Defeating Internet Blocking With Lahana VPN-Tor Bridge

As the anti-government protests in Turkey have escalated in the last few days, privacy activists and security experts have begun working on ways to help people inside Turkey get reliable access to the Internet and privacy tools such as Tor. A security researcher over the weekend released a new to...

Barracuda SSL VPN 680 2.2.2.203 Open Redirect

Title: ====== Barracuda SSL VPN 680 2.2.2.203 - Redirect Web Vulnerability Date: ===== 2013-05-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=755 Barracuda Networks Security ID BNSEC: 731 VL-ID: ===== 755 Common Vulnerability Scoring System:...

Barracuda SSL VPN 680 - returnTo Open Redirection

Barracuda SSL VPN 680 - returnTo Open Redirection source: https://www.securityfocus.com/bid/60172/info Barracuda SSL VPN 680 is prone to an open-redirection vulnerability. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting vict...

Barracuda SSL VPN 680 - 'returnTo' Open Redirection

source: https://www.securityfocus.com/bid/60172/info Barracuda SSL VPN 680 is prone to an open-redirection vulnerability. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an...

[SECURITY] Fedora 19 Update: tinc-1.0.21-1.fc19

tinc is a Virtual Private Network VPN daemon that uses tunnelling and encryption to create a secure private network between hosts on the Internet. Because the tunnel appears to the IP level network code as a normal network device, there is no need to adapt any existing software. This tunnelling...

Barracuda SSL VPN 680 2.2.2.203 - Redirect Vulnerability

Document Title: =============== Barracuda SSL VPN 680 2.2.2.203 - Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=755 Barracuda Networks Security ID BNSEC: 727 Release Date: ============= 2013-05-24 Vulnerability Laboratory ID VL-I...

Barracuda SSL VPN 680 2.2.2.203 - Redirect Vulnerability

Document Title: =============== Barracuda SSL VPN 680 2.2.2.203 - Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=755 Barracuda Networks Security ID BNSEC: 727 Release Date: ============= 2013-05-24 Vulnerability Laboratory ID VL-I...

Fedora Update for tinc FEDORA-2013-7128

Check for the Version of tinc OpenVAS Vulnerability Test Fedora Update for tinc FEDORA-2013-7128 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for tinc FEDORA-2013-7120

Check for the Version of tinc OpenVAS Vulnerability Test Fedora Update for tinc FEDORA-2013-7120 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 18 Update: tinc-1.0.21-1.fc18

tinc is a Virtual Private Network VPN daemon that uses tunnelling and encryption to create a secure private network between hosts on the Internet. Because the tunnel appears to the IP level network code as a normal network device, there is no need to adapt any existing software. This tunnelling...

[SECURITY] Fedora 17 Update: tinc-1.0.21-1.fc17

tinc is a Virtual Private Network VPN daemon that uses tunnelling and encryption to create a secure private network between hosts on the Internet. Because the tunnel appears to the IP level network code as a normal network device, there is no need to adapt any existing software. This tunnelling...

3Com OfficeConnect VPN Firewall Default Credentials (HTTP)

The remote 3Com OfficeConnect VPN Firewall is using known default credentials. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...

3Com OfficeConnect VPN Firewall Detection (HTTP)

HTTP based detection of a 3Com OfficeConnect VPN Firewall. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Potential Man-In-The Middle Vulnerability in FortiClient VPN

...

Windows Manage Remote Point-to-Point Tunneling Protocol

This module initiates a PPTP connection to a remote machine VPN server. Once the tunnel is created we can use it to force the victim traffic to go through the server getting a man in the middle attack. Be sure to allow forwarding and masquerading on the VPN server mitm. This module requires...

Pentagon Approves Samsung KNOX Android Platform for DoD

Android has long been the outcast of mobile device security largely because hackers have been adept at getting malware onto the platform via third-party application marketplaces and lax submission policies on Google Play. The security of the operating system itself, however, hasn’t been challenge...

[SECURITY] [DSA 2665-1] strongswan security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2665-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez April 30, 2013 http://www.debian.org/security/faq -...

Debian DSA-2665-1 : strongswan - authentication bypass

Kevin Wojtysiak discovered a vulnerability in strongSwan, an IPsec based VPN solution. When using the OpenSSL plugin for ECDSA based authentication, an empty, zeroed or otherwise invalid signature is handled as a legitimate one. An attacker could use a forged signature to authenticate like a...