Linksys VPN routers DoS

IP packet with invalid IP options causes router to crash...

CVE-2005-2762

Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VPN user's credentials...

CVE-2005-2762

Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VPN user's credentials...

CVE-2005-4499

The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server CS ACS, generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges b...

CVE-2005-4499

CVE-2005-4499 affects Cisco PIX and VPN 3000 concentrators via the Downloadable RADIUS ACLs feature. When an ACL is created on CS ACS, the system generates a random internal name that doubles as a hidden username and password, enabling a remote attacker to sniff the cleartext username from a RADI...

VPNcheckpoint.txt

Situation: Employees should be allowed to access your company network from remote by VPN. You want to make sure, that only the hardware of your own company is allowed to access the network on the VPN. This because your company hardware uses a hardened operating system personal firewall,...

CVE-2005-4197

The vulnerability CVE-2005-4197 affects Nortel SSL VPN 4.2.1.6, specifically the tunnelform.yaws component. The issue allows remote attackers to execute arbitrary commands via a crafted link in the a parameter, and these commands run with extra privileges inside a cryptographically signed Java Ap...

CVE-2005-4197

tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is executed with extra privileges in a cryptographically signed Java Applet...

Nortel SSL VPN multiple vulnerabilities

Crossite scripting, code execution...

SEC Consult SA-20051211-0 :: Nortel SSL VPN Cross Site Scripting/Command Execution

SEC-CONSULT Security Advisory 20051212-0 ========================================================================== title: Nortel SSL VPN Cross Site Scripting/Command Execution program: Nortel SSL VPN vulnerable version: 4.2.1.6 homepage: www.nortel.com found: 2005-05-30 by: Daniel Fabian /...

CVE-2005-4093

Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modifying the local copy of the local.scv policy file after it has been downloaded from the VPN Endpoint...

CVE-2005-4093

Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modifying the local copy of the local.scv policy file after it has been downloaded from the VPN Endpoint...

CVE-2005-4093

CVE-2005-4093 affects Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0 and 4.1. The vulnerability allows a remote attacker to bypass security policies by modifying the local copy of the local.scv policy file after it has been downloaded from the VPN Endpoint. The i...

Nortel SSL VPN 4.2.1.6 - Web Interface Input Validation

Nortel SSL VPN 4.2.1.6 - Web Interface Input Validation source: https://www.securityfocus.com/bid/15798/info Nortel SSL VPN is prone to an input validation vulnerability. This issue could be exploited to cause arbitrary commands to be executed on a user's computer. Cross-site scripting attacks ar...

[Full-disclosure] Checkpoint SecureClient NGX Security Policy can easily be disabled

Situation: Employees should be allowed to access your company network from remote by VPN. You want to make sure, that only the hardware of your own company is allowed to access the network on the VPN. This because your company hardware uses a hardened operating system personal firewall,...

Nortel SSL VPN 4.2.1.6 - Web Interface Input Validation

source: https://www.securityfocus.com/bid/15798/info Nortel SSL VPN is prone to an input validation vulnerability. This issue could be exploited to cause arbitrary commands to be executed on a user's computer. Cross-site scripting attacks are also possible. Nortel SSL VPN 4.2.1.6 is vulnerable to...

Checkpoint SecureClient VPN/Firewall client race conditions

In short period between download and aplliance it's possible to overwrite client security policy file...

Check Point VPN-1 SecureClient 4.0 < 4.1 - Policy Bypass

source: https://www.securityfocus.com/bid/15757/info VPN-1 SecureClient is reported prone to a policy bypass vulnerability. This issue is due to a failure of the application to securely implement remote administrator-provided policies on affected computers. This issue allows remote VPN users to...

Check Point VPN-1 SecureClient 4.0 4.1 - Policy Bypass

Check Point VPN-1 SecureClient 4.0 4.1 - Policy Bypass source: https://www.securityfocus.com/bid/15757/info VPN-1 SecureClient is reported prone to a policy bypass vulnerability. This issue is due to a failure of the application to securely implement remote administrator-provided policies on...

CVE-2004-2621

CVE-2004-2621 relates to the Nortel Contivity VPN Client. The provided sources indicate that, for versions 2.1.7, 3.00, 3.01, 4.91, and 5.01, a race condition occurs when opening a VPN tunnel: the gateway certificate is not checked until after a user-facing dialog is shown, which could allow a re...