8502 matches found
Cisco VPN 3000 Series Multiple Vulnerabilities (CSCdea77143, CSCdz15393, CSCdt84906)
The remote Cisco VPN 3000 concentrator is affected by several vulnerabilities that could allow an attacker to use this device to break into a VPN, disable the remote device by sending a malformed SSH initialization packet or disable the remote device by sending a flood of malformed ICMP packets...
Multiple Cisco VPN 3000 bugs
IP filtering bypassing if IPSec enabled, SSH DoS, ICMP flood DoS...
Multiple bugs in Cisco VPN 3000
No description provided...
Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerabilities Revision 1.0 For Public Release 2003 May 7 at 1600 UTC GMT ---------------------------------------------------------------------- Contents Summary Affected Products Details Impact...
[SECURITY] [DSA 295-1] New pptpd packages fix remote root exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 295-1 [email protected] http://www.debian.org/security/ Martin Schulze April 30th, 2003 http://www.debian.org/security/faq -...
PoPToP PPTP server remotely exploitable buffer overflow
Versions older than 1.1.4-b3 and 1.1.3-20030409 affected. This seems to be exploitable only with Linux. PPTP? ----- PPTP-over-IPSEC is commonly used to create VPNs. Windows plays quite nicely with it. problem ------- PPTP packet header contain 16bit length which specifies the full size of the...
Linksys BEFVP4 - SNMP Community String Information Disclosure
source: https://www.securityfocus.com/bid/7317/info Linksys BEFVP4 VPN router has been reported prone to a sensitive information disclosure vulnerability. It has been reported that SNMP community strings which, are world readble by default, contain sensitive information pertaining to the internal...
CVE-2002-1046
Dynamic VPN Configuration Protocol service DVCP in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service crash via a malformed packet containing tab characters to TCP port 4110...
CVE-2002-0848
Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol PAP or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to...
CVE-2002-1491
The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges...
CVE-2002-0848
CVE-2002-0848 affects Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier. When using RADIUS with a PAP or Challenge, the system sends the user password in cleartext in a validation retry request, enabling potential password capture by remote attackers...
CVE-2002-0853
Cisco Virtual Private Network VPN Client 3.5.4 and earlier allows remote attackers to cause a denial of service CPU consumption via a packet with a zero-length payload...
CVE-2002-0853
CVE-2002-0853 affects Cisco VPN Client 3.5.4 and earlier. The vulnerability allows remote attackers to cause a denial of service (CPU consumption) by sending a packet with a zero-length payload. No root cause details or affected versions beyond the stated range are provided in the supplied docume...
CVE-2002-1046
The CVE-2002-1046 entry describes a Denial of Service against Watchguard Firebox firmware 5.x.x via the Dynamic VPN Configuration Protocol (DVCP). A remote attacker can crash the device by sending a malformed packet containing tab characters to TCP port 4110. No root cause, affected versions beyo...
CVE-2002-1492
Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via 1 closetunnel and 2 opentunnel...
l2tpd Malformed Data Remote DoS
The remote host is running l2tpd, a network tunneling application. The installed version is vulnerable to a denial of service attack. An attacker may use this flaw to disable the VPN and prevent partners / employees from connecting to it. C Tenable Network Security, Inc. Ref:...
NETGEAR ProSafe VPN Firewall Web Server Malformed Basic Authorization Header Remote DoS (intrusive check)
It was possible to crash the remote Web server possibly the NETGEAR ProSafe VPN Web interface by supplying a long malformed username and password. An attacker may use this flaw to disable the remote service. TRUSTED...
NETGEAR ProSafe 1.x - VPN Firewall Web Interface Login Denial of Service
NETGEAR ProSafe 1.x - VPN Firewall Web Interface Login Denial of Service source: https://www.securityfocus.com/bid/7166/info It has been reported that some ProSafe VPN Firewall devices do not properly handle some types of input. Because of this, a remote user could potentially send malicious inpu...
Netgear ProSafe 1.x - VPN Firewall Web Interface Login Denial of Service
source: https://www.securityfocus.com/bid/7166/info It has been reported that some ProSafe VPN Firewall devices do not properly handle some types of input. Because of this, a remote user could potentially send malicious input to the device that would result in a crash, and potential denial of...