CVE-2002-1755

tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC...

CVE-2001-1499

The CVE affects Check Point VPN-1 4.1SP4 with SecuRemote. The vulnerability arises from differing error messages for valid vs. invalid users, depending on authentication method, which can facilitate brute-force attempts. Affected component: VPN-1/SecuRemote authentication prompts. Impact: enables...

CVE-2005-2025

CVE-2005-2025 affects Cisco VPN 3000 Concentrator prior to 4.1.7.F. The vulnerability allows remote attackers to enumerate valid group names by sending an IKE Aggressive Mode packet with the group name in the ID field; a response is generated for valid group names, while invalid ones elicit no re...

CVE-2005-2025

Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname...

Cisco VPN 3000 groupname enumeration

Different bahaviour for valid and invalid groupname in IKE aggressive mode...

Cisco VPN Concentrator Group Name Enumeration

Binary data 3023.prm...

[Full-disclosure] Cisco VPN Concentrator Groupname Enumeration Vulnerability

Cisco VPN Concentrator Groupname Enumeration Vulnerability 1. Overview: NTA Monitor has discovered a groupname enumeration vulnerability in the Cisco VPN 3000 series concentrator products while performing a VPN security test for a customer. The vulnerability affects remote access VPNs with...

Mac OS X Multiple Vulnerabilities (Security Update 2005-006)

The remote host is missing Security Update 2005-006. This security update contains security fixes for the following application : - AFP Server - Bluetooth - CoreGraphics - Folder Permissions - launchd - LaunchServices - NFS - PHP - VPN These programs have multiple vulnerabilities, some of which m...

Cisco IOS Easy VPN Server fails to properly process ISAKMP profile attributes

Overview Cisco IOS Easy VPN Server fails to properly process ISAKMP profile attributes. This may allow a remote, unauthenticated attacker to access the private network. Description Easy VPN Server Cisco IOS Easy VPN Server allows an IOS device to function as a VPN concentrator, providing...

Cisco IOS Easy VPN Server may allow unauthorized users to complete XAUTH authentication

Overview A vulnerability in Cisco IOS Easy VPN Server may allow unauthorized users to complete XAUTH authentication and potentially access private network resources. Description Easy VPN Server Cisco IOS Easy VPN Server allows an IOS device to function as a VPN concentrator, providing...

Microsoft Windows 2000 VPN Detection

Binary data 2949.prm...

Netscreen VPN Detection

Binary data 2950.prm...

SafeNet SoftRemote VPN Detection

Binary data 2952.prm...

OpenPGP VPN Detection

Binary data 2951.prm...

KAME/racoon VPN Detection

Binary data 2948.prm...

CVE-2005-1802

Nortel VPN Router (also known as Contivity) is affected by CVE-2005-1802. A remote attacker can cause a denial of service (crash) by sending an IPsec IKE packet with a malformed ISAKMP header. The available documents identify the vulnerable component as the IPsec/IKE handling, but do not provide ...

CVE-2005-1802

Nortel VPN Router aka Contivity allows remote attackers to cause a denial of service crash via an IPsec IKE packet with a malformed ISAKMP header...

Nortel VPN routers DoS

IKE packets with malformed ISAKMP header lead to crash or reboot...

[Full-disclosure] Nortel VPN Router Malformed Packet DoS Vulnerability

Nortel VPN Router Malformed Packet DoS Vulnerability Summary: NTA Monitor have discovered a denial of service DoS vulnerability in the Nortel VPN Router products which were previously known as Nortel Contivity while performing a VPN security test for a customer. We believe that this is a serious...

[SA15548] Nortel VPN Routers IKE Packet Handling Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...