CVE-2006-0383

IPSec when used with VPN networks in Mac OS X 10.4 through 10.4.5 allows remote attackers to cause a denial of service application crash via unspecified vectors involving the "incorrect handling of error conditions"...

CVE-2006-0383

Mac OS X IPSec VPN on versions 10.4–10.4.5 is affected by a vulnerability that can cause a denial of service (application crash) due to incorrect handling of error conditions. This CVE (CVE-2006-0383) is described in the NVD entry with a base score of 5.0 (Medium) and network attack vector with n...

Multipl NCP Secure Communications VPN / PKI client security vulnerabilities

Local buffer overflows and privilege escalations, remote DoS...

NCP VPN/PKI Client - various Bugs

Application: NCP VPN/PKI Client Site: http://www.ncp.de Version: 8.11, Build 146 and maybe lower OS: Windows Bugs: Local Privilige Escalation, DoS and other Product: ======== NCP's Secure Communications provides a comprehensive portfolio of products for implementing total solutions for...

L2TP VPN Client Detection

Binary data 3407.prm...

L2TP VPN Server Detection

Binary data 3408.prm...

Re: [VulnWatch] Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack

With respect to: http://archives.neohapsis.com/archives/vulnwatch/2006-q1/0036.html I'm the person who discovered this particular Cisco VPN vulnerability and divulged some details at the end of my talk at Shmoocon - not "Schmoocon" as the original advisory spells it. The exploit involves sending ...

CVE-2006-0483

Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service device reload or user disconnect via a crafted HTTP packet...

CVE-2006-0483

Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service device reload or user disconnect via a crafted HTTP packet...

CVE-2006-0483

CVE-2006-0483 affects Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A. The vulnerability allows remote attackers to cause a denial of service (device reload or user disconnect) by sending a crafted HTTP packet. The incident is categorized with network access, no authent...

Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack

...

Cisco VPN Concentrator 3000 < 4.7.3 Crafted HTTP Packet DoS

Binary data 3382.prm...

[Full-disclosure] Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack Advisory ID: cisco-sa-20060126-vpn http://www.cisco.com/warp/public/707/cisco-sa-20060126-vpn.shtml Revision 1.0 For Public Release 2006 January 26 1700 UTC GMT...

Design/Logic Flaw

Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length...

CVE-2006-0309

Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length...

CVE-2006-0309

The CVE-2006-0309 entry affects Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04. The vulnerability allows remote attackers on the local network to cause a denial of service by sending IP packets with a null IP option length. Connected records (NVD/CVE) confirm the affected device and the att...

CVE-2006-0309

Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length...

CVE-2006-0255

Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when SecureClient attempts to launch the SrGUI.exe program...

CVE-2006-0255

Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient could allow local privilege escalation via a malicious program.exe placed in the C:\ folder, which is executed when SecureClient launches Sr_GUI.exe. Affected product: Check Point VPN-1 SecureClient. Root cause: unquoted...

CVE-2006-0255

Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when SecureClient attempts to launch the SrGUI.exe program...