Cisco VPN 3000 Concentrator Multiple Vulnerabilities

...

Cisco VPN 3000 Series Concentrator Client - Authentication Denial of Service

Cisco VPN 3000 Series Concentrator Client - Authentication Denial of Service // source: https://www.securityfocus.com/bid/5620/info Cisco VPN 3000 series concentrators are prone to a denial of service condition when receiving an overly long username string during authentication from a VPN client...

Multiple Cisco VPN 3000 Vulnerabilities

...

Cisco VPN 3000 series concentrator does not properly handle malformed ISAKMP packets

Overview Cisco VPN 3000 series concentrators do not properly handle specially crafted Internet Security Association and Key Management Protocol ISAKMP packets, which can cause a vulnerable device to reload, denying service to legitimate users. Description According to information on the Cisco web...

Cisco VPN 3000 Series Concentrator Client - Authentication Denial of Service

// source: https://www.securityfocus.com/bid/5620/info Cisco VPN 3000 series concentrators are prone to a denial of service condition when receiving an overly long username string during authentication from a VPN client. Successful exploitation will cause the device to reload. / ISAKMP Cisco VPN...

CVE-2002-0852

Buffer overflows in Cisco Virtual Private Network VPN Client 3.5.4 and earlier allows remote attackers to cause a denial of service via 1 an Internet Key Exchange IKE with a large Security Parameter Index SPI payload, or 2 an IKE packet with a large number of valid payloads...

CVE-2002-0852

Cisco VPN Client 3.5.4 and earlier is affected by CVE-2002-0852 due to buffer overflows in IKE processing. The vulnerability allows remote attackers to cause a denial of service by sending crafted IKE traffic, specifically (1) an IKE message with a large Security Parameter Index (SPI) payload and...

Cisco VPN Client Multiple Vulnerabilities

...

CVE-2002-0848

Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol PAP or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to...

CVE-2002-0426

VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys...

Security Advisory: Cisco VPN Client Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities Revision 1.0 For Public Release 2002 August 12 UTC 1500 ---------------------------------------------------------------------- Contents Summary Affected Products Details Impact Softwar...

Security Advisory: Cisco VPN 5000 Series Concentrator RADIUS PAP Authentication Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 5000 Series Concentrator RADIUS PAP Authentication Vulnerability Revision 1.0 For Public Release 2002 August 07 UTC 1500 Contents Summary Affected Products Details Impact Software Versions and Fixes Obtaining Fixed...

Cisco VPN 5000 Series Concentrator RADIUS PAP Authentication Vulnerability

...

Phenoelit Advisory 0815 ++ -- Brick

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 ++- Authors FX [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de http://www.phenoelit.de/stuff/LucentBrick.txt Affected Products Lucent LSMS 5.5 Lucent Brick, Bridging VPN Firewall Lucent Bug ID: Not assigned...

KPMG-2002030: Watchguard Firebox Dynamic VPN Configuration Protocol DoS

-------------------------------------------------------------------- Title: Watchguard Firebox Dynamic VPN Configuration Protocol DoS BUG-ID: 2002030 Released: 9th Jul 2002 -------------------------------------------------------------------- Problem: ======== A malicious user can crash the Dynami...

Watchguard Firebox DoS

Specially crafted data sent to TCP/4110 causes Dynamic VPN Configuration Protocol service to crash...

CVE-2001-1158

Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, acceptfw1rdp, which can allow remote attackers to bypass intended restrictions with forged RDP internal protocol headers to UDP port 259 of arbitrary hosts...

CVE-2001-0940

Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name...

CVE-2001-1176

Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection...

CVE-2002-0047

CVE-2002-0047 affects the CIPE VPN package; the Debian advisory notes a bug in CIPE’s packet handling where a received packet that is too short could crash the process. Affected version: CIPE prior to 1.3.0-3. The Debian DSA-104-1 advisory (and OpenVAS NASL) describe this as a DoS via a short mal...