8503 matches found
Nortel Contivity VPN information leak
Messages for wrong username and wrong password are different...
Nortel Networks Contivity VPN Client information leakage vulnerability
Name: User Account Enumeration in Nortel Contivity VPN Vendor: Nortel Networks Products Affected: Nortel Networks Contivity VPN Client Type: Remote User Account Enumeration Severity: Medium I. Overview The Nortel Networks Contivity VPN Client authentication error message provides more information...
Nortel Networks Contivity VPN Client information leakage vulnerability
Overview The Nortel Networks Contivity VPN Client authentication error message provide additional information that may be useful to an attacker. Description The Nortel Networks Contivity VPN Client software provides an encrypted and authenticated VPN connection from a client system to a Nortel...
Presentation: Bypassing client application protection techniques with notepad
Topic: Bypassing client application protection techniques Category: Protection bypass Affected products: CheckPoint VPN-1TM & FireWall-1R NG with Application Intelligence R55 HFA 9 Microsoft Windows XP SP2 Agnitum Outpost Pro 2.1, 2.5 Tiny Firewall Pro v6.0.100 ZoneAlarm Pro with Web Filtering...
The ActiveX and HTML file browsers of the Symantec 4400 Series Clientless VPN Gateway contains various unspecified vulnerabilities
Overview The ActiveX and HTML file browsers in the Symantec Clientless VPN Gateway 4400 Series contain various unspecified vulnerabilities. Description The Symantec Clientless VPN Gateway 4400 Series is a stand-alone security appliance for connecting remote users to a trusted network via a virtua...
Debian DSA-104-1 : cipe - DoS attack
Larry McVoy found a bug in the packet handling code for the CIPE VPN package: it did not check if a received packet was too short and could crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Adviso...
CVE-2004-0699
Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data...
Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Security Advisory SYM04-013 22 September, 2004 Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues Revision History None Risk Impact High Overview Symantec resolved three high-risk vulnerabilities that...
CVE-2004-0699
CVE-2004-0699 describes a heap-based buffer overflow in the ASN.1 decoding library used by Check Point VPN-1 products when Aggressive Mode IKE is enabled. The root cause is a vulnerability in ASN.1 decoding that can be triggered by sending a malformed IKE packet after initiating a negotiation, al...
CVE-2004-0699
Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data...
Cisco VPN 3000 Concentrator Multiple Service Banner System Information Disclosure (CSCdu35577 HTTP Check)
The remote VPN concentrator gives out too much information in application layer banners. An incorrect page request provides the specific version of software installed. This vulnerability is documented as Cisco bug ID CSCdu35577. %NASLMINLEVEL 70300 This script was written by Michael J. Richardson...
Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)
Binary data 2234.prm...
Cisco VPN Concentrator Service Banner Information Disclosure (Bug ID CSCdu35577)
Binary data 2218.prm...
Cisco VPN Concentrator HTML Source Certificate Password Disclosure (Bug ID CSCdw50657)
Binary data 2230.prm...
Cisco VPN Concentrator Service Banners Information Disclosure (Bug ID CSCdu35577)
Binary data 2216.prm...
Cisco VPN Concentrator ISAKMP PAcket Remote DoS (Bug ID CSCdy38035)
Binary data 2247.prm...
Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)
Binary data 2236.prm...
Cisco VPN Concentrator HTML Interface DoS (Bug ID CSCdu15622)
Binary data 2211.prm...