CVE-2007-2464

Cisco ASA/PIX race condition (CVE-2007-2464) affects ASA and PIX (versions 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19) when using clientless SSL VPNs, allowing remote attackers to trigger a denial of service (device reload) via non-standard SSL sessions. The fault is a race condition in handling...

CVE-2007-2463

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2217 allows remote attackers to cause a denial of service device reload via unknown vectors related to VPN connection termination and password expiry...

LDAP and VPN Vulnerabilities in PIX and ASA Appliances

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

[Full-disclosure] Aventail Connect SSL VPN Client Buffer Overflow

Hello, Aventail Connect registers a layered service provider to handle DNS queries. When resolving a hostname the software fails to check string boundaries properly. As the lsp intercepts all ws232 dns lookups every application performing these operations is vulnerable. e.g. $ ssh $perl -e 'print...

Aventail Connect SSL VPN Client Buffer Overflow

Buffer overflow in gethostbyname family functions hoocked thorugh LSP on oversized hotname in any application...

PT-2007-3788 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and PIX versions 7.1 before 7.1249 Cisco Adaptive Security Appliance ASA and PIX versions 7.2 before 7.2219 Description: The issue is related to a race condition when using clientless SSL VPNs, allowing...

PT-2007-3787 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and PIX versions 7.1 before 7.1249 Cisco Adaptive Security Appliance ASA and PIX versions 7.2 before 7.2217 Description: The issue allows remote attackers to cause a denial of service, resulting in a devi...

CVE-2007-2332

Nortel VPN Router aka Contivity 1000, 2000, 4000, and 5000 before 605.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store...

CVE-2007-2334

Nortel VPN Router aka Contivity 1000, 2000, 4000, and 5000 before 505.149, 505.3xx before 505.304, and 6.x before 605.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via...

Default credentials

Nortel VPN Router aka Contivity 1000, 2000, 4000, and 5000 before 605.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store...

CVE-2007-2333

Nortel VPN Router aka Contivity 1000, 2000, 4000, and 5000 before 505.149, 505.3xx before 505.304, and 6.x before 605.140 includes the FIPSecryptedtest1219 and FIPSunecryptedtest1219 default accounts in the LDAP template, which might allow remote attackers to access the private network...

Design/Logic Flaw

Nortel VPN Router aka Contivity 1000, 2000, 4000, and 5000 before 505.149, 505.3xx before 505.304, and 6.x before 605.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via...

Design/Logic Flaw

Nortel VPN Router aka Contivity 1000, 2000, 4000, and 5000 before 505.149, 505.3xx before 505.304, and 6.x before 605.140 includes the FIPSecryptedtest1219 and FIPSunecryptedtest1219 default accounts in the LDAP template, which might allow remote attackers to access the private network...

CVE-2007-2332

The CVE-2007-2332 issue affects Nortel VPN Router (Contivity) models 1000/2000/4000/5000 prior to 6_05.140. The underlying weakness is a fixed DES key used to encrypt passwords, enabling remote authenticated users to brute-force a password from the LDAP store. Impact is credential exposure for pa...

CVE-2007-2334

Nortel VPN Router aka Contivity 1000, 2000, 4000, and 5000 before 505.149, 505.3xx before 505.304, and 6.x before 605.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via...

CVE-2007-2333

CVE-2007-2333 affects Nortel VPN Router (Contivity) models 1000, 2000, 4000, and 5000, with specific firmware ranges: before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140. The vulnerability involves default LDAP template accounts FIPSecryptedtest1219 and FIPSunecryptedtest1219, whic...

CVE-2007-2333

Nortel VPN Router aka Contivity 1000, 2000, 4000, and 5000 before 505.149, 505.3xx before 505.304, and 6.x before 605.140 includes the FIPSecryptedtest1219 and FIPSunecryptedtest1219 default accounts in the LDAP template, which might allow remote attackers to access the private network...

CVE-2007-2334

The CVE-2007-2334 issue affects Nortel VPN Router (Contivity) 1000/2000/4000/5000 prior to specific firmware revisions: 5_05.149, 5_05.304 for 5_05.x line, and 6.x prior to 6_05.140. The vulnerability arises from two template HTML files that lack certain verification tags, enabling remote attacke...

CVE-2007-2332

Nortel VPN Router aka Contivity 1000, 2000, 4000, and 5000 before 605.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store...

Nortel VPN路由器多个远程非授权访问漏洞

Nortel VPN路由器为IP网络和因特网上的安全连接提供路由、VPN、防火墙、带宽管理、加密、认证和数据完整性功能。 Nortel VPN路由器上配置了两个默认的用户帐号（FIPSecryptedtest1219和FIPSunecryptedtest1219），这些用户帐号存储在了路由器各种隧道类型的默认LDAP，允许攻击者获得对专用网络的非授权访问。 Nortel VPN路由器使用基于Web的设备管理界面。大多数功能仅在管理员授权后才能使用，但通过精心创建的URL攻击者可以未经授权访问一些管理Web页面，控制某些配置设备。 此外Nortel...