TheGreenBow VPN Client tgbvpn.sys DoS and Potential Local

Original Advisory Link: https://www.evilfingers.com/advisory/Advisory/TheGreenBowVPNClienttgbvpn.sysDoS.php ++++++++++++++++++++++++++++++++++++++++++++++++++++ -----------TheGreenBow VPN Client tgbvpn.sys DoS and Potential Local Privilege Escalation--------- Author: Giuseppe 'Evilcry' Bonfa'...

TheGreenBow VPN Denial Of Service

Original Advisory Link: https://www.evilfingers.com/advisory/Advisory/TheGreenBowVPNClienttgbvpn.sysDoS.php ++++++++++++++++++++++++++++++++++++++++++++++++++++ -----------TheGreenBow VPN Client tgbvpn.sys DoS and Potential Local Privilege Escalation--------- Author: Giuseppe 'Evilcry' Bonfa'...

Juniper SSL-VPN IVE JuniperSetupDLL.dll ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the JuniperSetupDLL.dll library which is called by the JuniperSetup.ocx ActiveX control, as part of the Juniper SSL-VPN IVE appliance. By specifying an overly long string to the ProductName object parameter, the stack is overwritten. This module...

[SECURITY] Fedora 11 Update: openswan-2.6.21-5.fc11

Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 10 Update: openswan-2.6.21-2.fc10

Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

Cisco VPN Concentrator 3000 FTP Unauthorized Administrative Access

This module tests for a logic vulnerability in the Cisco VPN Concentrator 3000 series. It is possible to execute some FTP statements without authentication CWD, RNFR, MKD, RMD, SIZE, CDUP. It also appears to have some memory leak bugs when working with CWD commands. This module simply creates an...

RedHat Security Advisory RHSA-2009:1138

The remote host is missing updates announced in advisory RHSA-2009:1138. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

RedHat Security Advisory RHSA-2009:1138

The remote host is missing updates announced in advisory RHSA-2009:1138. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

RHEL 5 : openswan (RHSA-2009:1138)

Updated openswan packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Ke...

openswan security update

CentOS Errata and Security Advisory CESA-2009:1138 Updated openswan packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation ...

Cisco ASA Web VPN multiple security vulnerabilities

Crossite scripting, filtering bypass, information leak...

Cisco ASA Web VPN Vulnerabilities

Trustwave's SpiderLabs Security Advisory TWSL2009-002: Cisco ASA Web VPN Multiple Vulnerabilities Published: 2009-06-24 Version: 1.0 Vendor: Cisco Systems, Inc. http://www.cisco.com Versions affected: 8.04, 8.1.2, and 8.2.1 Description: Cisco's Adaptive Security Appliance ASA provides a number of...

Trustwave's SpiderLabs Security Advisory TWSL2009-002

Trustwave's SpiderLabs Security Advisory TWSL2009-002: Cisco ASA Web VPN Multiple Vulnerabilities Published: 2009-06-24 Version: 1.0 Vendor: Cisco Systems, Inc. http://www.cisco.com Versions affected: 8.04, 8.1.2, and 8.2.1 Description: Cisco's Adaptive Security Appliance ASA provides a number of...

Cisco ASA Adaptive Security Appliance Software Clientless SSL VPN Rot13-Encoded Cross-Site Scripting Vulnerability

Cisco ASA Adaptive Security Appliance Software versions prior to 8.0.434, 8.1.225, and 8.2.13 that have been configured to accept Clientless SSL VPN connections contain a cross-site scripting vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary script or HTML co...

Cisco ASA Adaptive Security Appliance Clientless SSL VPN DOM Cross-Site Scripting Vulnerability

Cisco ASA Adaptive Security Appliance Software versions prior to 8.0.434, 8.1.225, and 8.2.13 that are configured to accept Clientless SSL VPN connections are affected by a cross-site scripting vulnerability. Versions 7.x are not affected. The vulnerability is due to insufficient restrictions on...

Cisco ASA Adaptive Security Appliance Clientless SSL VPN CIFS and FTP Credential Theft Vulnerability

Cisco ASA Adaptive Security Appliance Software versions prior to 8.0.434, 8.1.225, and 8.2.13 that have been configured to accept Clientless SSL VPN connections contain a vulnerability that could allow an unauthenticated, remote attacker to steal user account credentials. Versions 7.x are not...

Cross site scripting

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

CVE-2009-2119

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

CVE-2009-2119

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

CVE-2009-2119

CVE-2009-2119 is an XSS vulnerability in the FirePass login interface (my.logon.php3) affecting F5 FirePass SSL VPN 5.5–5.5.2 and 6.0–6.0.3. The issue allows remote attackers to inject arbitrary script/HTML via a base64-encoded xcho parameter. The root cause is insufficient sanitization of input ...