Memory corruption

Unspecified vulnerability in the Supervisor Engine 32 Sup32, Supervisor Engine 720 Sup720, and Route Switch Processor 720 RSP720 for multiple Cisco products, when using Multi Protocol Label Switching MPLS VPN and OSPF sham-link, allows remote attackers to cause a denial of service blocked queue,...

CVE-2008-0537

Unspecified vulnerability in the Supervisor Engine 32 Sup32, Supervisor Engine 720 Sup720, and Route Switch Processor 720 RSP720 for multiple Cisco products, when using Multi Protocol Label Switching MPLS VPN and OSPF sham-link, allows remote attackers to cause a denial of service blocked queue,...

CVE-2008-0537

Unspecified vulnerability in the Supervisor Engine 32 Sup32, Supervisor Engine 720 Sup720, and Route Switch Processor 720 RSP720 for multiple Cisco products, when using Multi Protocol Label Switching MPLS VPN and OSPF sham-link, allows remote attackers to cause a denial of service blocked queue,...

CVE-2008-0537

The CVE-2008-0537 entry concerns Cisco IOS-based platforms (Catalyst 6500 Series and Cisco 7600 Router devices) running Supervisor Engine 32 (Sup32), Supervisor Engine 720 (Sup720), or Route Switch Processor 720 (RSP720). The vulnerability occurs when OSPF Sham-Link and MPLS VPN are enabled, allo...

Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Security Advisory: Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Multicast Virtual Private Network MVPN Data Leak Advisory ID: cisco-sa-20080326-mvpn http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml Revision 1.0 For Public Release 2008 March 26 1600 UTC GMT Summar...

Cisco Security Advisory: Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720 Advisory ID: cisco-sa-20080326-queue http://www.cisco.com/warp/public/707/cisco-sa-20080326-queue.shtml Revision...

Hamachi Password Disclosure Vulnerability

Hamachi VPN Client 1.0.2.5 Password Disclosure Vulnerability 1 Infos --------- Date : 2008-03-24 Product : Hamachi VPN Client 1.0.2.5 Version : 1.0.2.5 Vendor : www.hamachi.it/ Vendor Status : 2008-03-24 - Not Informed Discovered/Provided By : Giuseppe Evilcry Bonfa' - http://evilcry.altervista.o...

Hamachi VPN Client cleartext password in process memory

Cleartext username and password can be dumped in cleartext from process memory...

Check Point VPN-1 IP地址碰撞拒绝服务漏洞

BUGTRAQ ID: 28299 CNCAN ID:CNCAN-2008032101 Check Point VPN-1是一款集成防火墙，防病毒，入侵防护的安全解决方案。 Check Point VPN-1防火墙存在一个信息泄漏问题，远程攻击者可以利用漏洞访问不可授权访问的敏感数据。 在如下情况下会触发此漏洞： 远程访问客户端C连接到网关A，一个站到站VPN通道存在于网关A和B之间，如果远程访问客户端c有一个IP地址也定义在网关B的加密域中，就会发生碰撞：在网关B的加密域中的如上所述的IP地址的新连接会不正确的传送到远程访问客户端C，存在连接不受影响。...

Code injection

Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service site-to-site VPN tunnel outage, and possibly intercept network traffic, by configuring the local RFC1918 IP address to be the same as one of this tunnel's...

CVE-2008-1397

Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service site-to-site VPN tunnel outage, and possibly intercept network traffic, by configuring the local RFC1918 IP address to be the same as one of this tunnel's...

CVE-2008-1397

Affected product/versions: Check Point VPN-1 Power/UTM, NGX R60–R65 and NG AI R55. Vulnerability: remote authenticated users can cause a site-to-site VPN tunnel outage and possibly intercept traffic by configuring the local RFC1918 IP address to match an endpoint RFC1918 address, then using SecuR...

CVE-2008-1397

Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service site-to-site VPN tunnel outage, and possibly intercept network traffic, by configuring the local RFC1918 IP address to be the same as one of this tunnel's...

Check Point VPN-1 information disclosure vulnerability

Overview The Check Point VPN-1 firewall contains an information disclosure vulnerability that may allow an authenticated attacker to access data that they are not authorized to access. Description The Check Point VPN-1 is an application layer firewall that supports remote and site-to-site virtual...

checkpoint_080306.txt

Louhi Networks Security Advisory Advisory: Checkpoint VPN-1 UTM Edge cross-site scripting Release Date: 2008/03/06 Last Modified: 2008/03/06 Authors: Henri Lindberg, Associate of ISC² [email protected] Application: Checkpoint VPN-1 Edge W Embedded NGX 7.0.48x patched in version 7.5.48...

Checkpoint VPN-1 Edge crossite scripting

Crossite scriptign with web authorization page...

Henri Lindberg - Smilehouse Oy

Louhi Networks Security Advisory Advisory: Checkpoint VPN-1 UTM Edge cross-site scripting Release Date: 2008/03/06 Last Modified: 2008/03/06 Authors: Henri Lindberg, Associate of ISC [email protected] Application: Checkpoint VPN-1 Edge W Embedded NGX 7.0.48x patched in version 7.5.48 Device...

Cross site scripting

Cross-site scripting XSS vulnerability in the login page in Check Point VPN-1 UTM Edge W Embedded NGX 7.0.48x allows remote attackers to inject arbitrary web script or HTML via the user parameter...