8508 matches found
CVE-2009-1156
CVE-2009-1156 affects Cisco ASA 5500 Series devices running 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15 when SSL VPN or ASDM is configured. A crafted SSL or HTTP packet can cause a denial of service resulting in a device reload. Fixed releases are 8.0(4)28+ and 8.1(2)19+, respectively (earlier fi...
Mandriva Update for drakx-net MDVA-2008:002 (drakx-net)
Check for the Version of drakx-net OpenVAS Vulnerability Test Mandriva Update for drakx-net MDVA-2008:002 drakx-net Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for vpnc MDVA-2008:122 (vpnc)
Check for the Version of vpnc OpenVAS Vulnerability Test Mandriva Update for vpnc MDVA-2008:122 vpnc Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Mandriva Update for vpnc MDVA-2008:122 (vpnc)
Check for the Version of vpnc OpenVAS Vulnerability Test Mandriva Update for vpnc MDVA-2008:122 vpnc Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Format string
Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name...
CVE-2009-1262
Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name...
RedHat Security Advisory RHSA-2009:0402
The remote host is missing updates announced in advisory RHSA-2009:0402. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...
Fortinet FortiClient VPN连接名称本地格式串漏洞
BUGTRAQ ID: 34343 FortiClient是新一代个人电脑安全防护平台，拥有防病毒、防火墙、VPN等强大的功能。 FortiClient的VPN功能中存在本地格式串漏洞。如果用户在VPN连接名称中指定了特制的格式串标识符并初始化了这个连接的话，就可以触发这个漏洞，导致以System权限级别读写任意内存。 FortiClient 3.0.614 Fortinet -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.fortinetfirewall.com/index.php...
FortiClient format string vulnerability
Format string vulnerability in VPN connection name allows kernel memory access...
Cisco ASA5520 Web VPN Host Header XSS
Cisco ASA5520 Web VPN Host Header XSS - Description Cross-site scripting. - Product Cisco, ASA5520, IOS 7.2222 - PoC Modified request: POST /+webvpn+/index.html HTTP/1.1 Host: "'scriptalert'BugsNotHugs'/scriptmeta httpequiv="" content='"www.owasp.org Accept: image/gif, image/x-xbitmap,...
Cisco ASA5520 Web VPN Cross Site Scripting
Cisco ASA5520 Web VPN Host Header XSS - Description Cross-site scripting. - Product Cisco, ASA5520, IOS 7.2222 - PoC Modified request: POST /+webvpn+/index.html HTTP/1.1 Host: "'alert'BugsNotHugs' alert'BugsNotHugs'meta httpequiv="" content='"www.owasp...
Important: Red Hat Security Advisory: openswan security update
Updated openswan packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key...
Cisco IOS cTCP协议远程拒绝服务漏洞
BUGTRAQ ID: 34246 CVECAN ID: CVE-2009-0635 Cisco IOS是思科网络设备所使用的互联网操作系统。 在配置为Easy VPN服务器的Cisco IOS设备上，如果启用了Cisco隧道控制协议（cTCP）封装功能，则一系列TCP报文可能导致设备耗尽内存。 Cisco IOS 12.4 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20090325-ctcp）以及相应补丁: cisco-sa-20090325-ctcp：Cisco IOS cTCP Denial of Service...
Design/Logic Flaw
Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...
CVE-2009-0635
Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...
Cisco Security Advisory: Cisco IOS cTCP Denial of Service Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS cTCP Denial of Service Vulnerability Advisory ID: cisco-sa-20090325-ctcp http://www.cisco.com/warp/public/707/cisco-sa-20090325-ctcp.shtml Revision 1.0 For Public Release 2009 March 25 1600 UTC GMT -...
Cisco plugs IOS security holes
By Chuck Miller, SC Magazine Security updates for Cisco’s Internetwork Operating System IOS were released Wednesday scmagazine.com to shield against a number of vulnerabilities. The security issues cisco.com are varied and relate to TCP, UDP, mobile and VPN vulnerabilities. In describing one bug,...
Ken "Skywing" Johnson joins Microsoft security team
Microsoft has hired yet another well-known security researcher to join its ever-growing team of exploit and defense experts. This time it’s Ken Johnson, known in the hacker world as Skywing. Johnson is known as an expert on debugging and reverse engineering, and has done a tremendous amount of wo...
