8503 matches found
Cisco VPN Concentrator ISAKMP Packet Remote DoS (Bug ID CSCdy38035)
Binary data 2248.prm...
CVE-2004-0040
Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet...
CVE-2002-1104
Cisco Virtual Private Network VPN Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service crash via TCP packets with source and destination ports of 137 NETBIOS...
CVE-2002-1096
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code...
CVE-2002-1447
Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative privileges via a long profile name in a connect argument...
CVE-2002-1099
Cisco VPN 3000 Concentrator versions 2.2.x and 3.x prior to 3.5.3 are vulnerable to an information disclosure allowing remote attackers to access certain HTML pages without authentication. The issue compromises confidentiality (partial) and is exploitable over the network with low complexity and ...
CVE-2002-1107
Affected software: Cisco VPN Client (2.x.x and 3.x before 3.5.2B). Issue: inadequate randomness in generated numbers. Impact: may enable spoofing or related attacks as described in CVE-2002-1107. Status in provided documents: no explicit exploit details or remediation version are listed; no addit...
CVE-2002-1097
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages...
CVE-2002-1491
The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges...
CVE-2002-1093
HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.0.3B allows remote attackers to cause a denial of service CPU consumption via a long URL request...
CVE-2004-0040
A buffer overflow flaw in the ISAKMP implementation used by Check Point VPN-1, SecuRemote, and SecureClient (ISAKMP/IKE) allows unauthenticated remote code execution via a crafted ISAKMP packet with a large Certificate Request payload. Exploitation targets UDP 500 and can run with VPN process pri...
CVE-2004-0190
The CVE concerns the Symantec FireWall/VPN Appliance model 200 where the password for the password administration page is recorded in cleartext. This could be cached on an administrator’s local system or in a proxy, enabling an attacker to steal the password and gain privileges. The provided sour...
CVE-2002-1105
Cisco Virtual Private Network VPN Client software 2.x.x, and 3.x before 3.5.1C, allows local users to use a utility program to obtain the group password...
CVE-2002-1102
The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to cause a denial of service via an incoming LAN-to-LAN connection with an existing security association with another device on the remote network, which causes the concentrator to...
CVE-2002-1447
The CVE-2002-1447 issue affects the UNIX VPN Client’s vpnclient executable. A buffer overflow is triggered by a long profile name in the connect argument, allowing local users to obtain administrative privileges. Affected product/version is VPN Client prior to 3.5.2. Remediation: upgrade to versi...
CVE-2002-1491
Cisco VPN 5000 Client for macOS before 5.2.2 stores the most recently used login password in plaintext when saving Default Connection settings, enabling local users to potentially gain privileges. Affected: MacOS client; root cause: plaintext storage of MRU password; impact: local privilege eleva...
CVE-2002-1097
Cisco VPN 3000 Concentrator is affected (versions 2.2.x and 3.x before 3.5.2). The issue is that certificate passwords are stored in plaintext in the HTML source of Certificate Management pages, allowing restricted administrators to access them. The documented fix is upgrading to 3.5.2 or later. ...
CVE-2002-1095
Cisco VPN 3000 Concentrator before 2.5.2F, with encryption enabled, allows remote attackers to cause a denial of service reload via a Windows-based PPTP client with the "No Encryption" option set...
CVE-2002-1106
Cisco Virtual Private Network VPN Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks...