Preemptive Protection against Microsoft ISA Server Cross-Site Scripting (XSS) Vulnerability (MS09-016)

A cross-site scripting XSS vulnerability has been reported in the cookieauth.dll component in Microsoft Internet Security and Acceleration ISA Server. ISA Server, originating as Microsoft Proxy Server, is a Firewall & Security product that provides Application-Layer Firewalling, acts as a VPN...

Cisco PIX/ASA拒绝服务，ACL绕过及验证绕过漏洞

安全公告 月度Top10安全漏洞 每日漏洞播报 Cisco PIX/ASA拒绝服务，ACL绕过及验证绕过漏洞 发布时间：2009-04-09 录入：启明星辰 BUGTRAQ ID: 34429 CVE ID：CVE-2009-1155 CVE-2009-1156 CVE-2009-1157 CVE-2009-1158 CVE-2009-1159 CVE-2009-1160 CNCVE ID：CNCVE-20091155 CNCVE-20091156 CNCVE-20091157 CNCVE-20091158 CNCVE-20091159 CNCVE-20091160 Cisco...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances Advisory ID: cisco-sa-20090408-asa http://www.cisco.com/warp/public/707/cisco-sa-20090408-asa.shtml Revision 1.0 For Public...

Cisco ASA Adaptive Security Appliance / Cisco PIX Security Appliance multiple security vulnerabilities

VPN authentication bypass, multiple DoS conditions...

[SECURITY] Fedora 10 Update: pptp-1.7.2-5.fc10

Client for the proprietary Microsoft Point-to-Point Tunneling Protocol, PPTP. Allows connection to a PPTP based VPN as used by employers and some cable and ADSL service providers...

CVE-2009-1156

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...

Authentication flaw

Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.11 through 7.1282, 7.2 before 7.2427, 8.0 before 8.0425, and 8.1 before 8.1215, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establis...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...

CVE-2009-1156

CVE-2009-1156 affects Cisco ASA 5500 Series devices running 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15 when SSL VPN or ASDM is configured. A crafted SSL or HTTP packet can cause a denial of service resulting in a device reload. Fixed releases are 8.0(4)28+ and 8.1(2)19+, respectively (earlier fi...

CVE-2009-1156

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...

Mandriva Update for vpnc MDVA-2008:122 (vpnc)

Check for the Version of vpnc OpenVAS Vulnerability Test Mandriva Update for vpnc MDVA-2008:122 vpnc Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for vpnc MDVA-2008:122 (vpnc)

Check for the Version of vpnc OpenVAS Vulnerability Test Mandriva Update for vpnc MDVA-2008:122 vpnc Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for drakx-net MDVA-2008:002 (drakx-net)

Check for the Version of drakx-net OpenVAS Vulnerability Test Mandriva Update for drakx-net MDVA-2008:002 drakx-net Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2009-1155: Improper Authentication

Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.11 through 7.1282, 7.2 before 7.2427, 8.0 before 8.0425, and 8.1 before 8.1215, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establis...

CVE-2009-1156: Undefined Security Weakness

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...

Format string

Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name...

CVE-2009-1262

Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name...

CVE-2009-1262: Use of Externally-Controlled Format String

Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name...

RedHat Security Advisory RHSA-2009:0402

The remote host is missing updates announced in advisory RHSA-2009:0402. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

Fortinet FortiClient VPN连接名称本地格式串漏洞

BUGTRAQ ID: 34343 FortiClient是新一代个人电脑安全防护平台，拥有防病毒、防火墙、VPN等强大的功能。 FortiClient的VPN功能中存在本地格式串漏洞。如果用户在VPN连接名称中指定了特制的格式串标识符并初始化了这个连接的话，就可以触发这个漏洞，导致以System权限级别读写任意内存。 FortiClient 3.0.614 Fortinet -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.fortinetfirewall.com/index.php...