Cisco ASA5520 Web VPN Host Header XSS

Cisco ASA5520 Web VPN Host Header XSS - Description Cross-site scripting. - Product Cisco, ASA5520, IOS 7.2222 - PoC Modified request: POST /+webvpn+/index.html HTTP/1.1 Host: "'scriptalert'BugsNotHugs'/scriptmeta httpequiv="" content='"www.owasp.org Accept: image/gif, image/x-xbitmap,...

Cisco ASA5520 Web VPN Cross Site Scripting

Cisco ASA5520 Web VPN Host Header XSS - Description Cross-site scripting. - Product Cisco, ASA5520, IOS 7.2222 - PoC Modified request: POST /+webvpn+/index.html HTTP/1.1 Host: "'alert'BugsNotHugs' alert'BugsNotHugs'meta httpequiv="" content='"www.owasp...

Important: Red Hat Security Advisory: openswan security update

Updated openswan packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key...

Cisco IOS cTCP协议远程拒绝服务漏洞

BUGTRAQ ID: 34246 CVECAN ID: CVE-2009-0635 Cisco IOS是思科网络设备所使用的互联网操作系统。 在配置为Easy VPN服务器的Cisco IOS设备上，如果启用了Cisco隧道控制协议（cTCP）封装功能，则一系列TCP报文可能导致设备耗尽内存。 Cisco IOS 12.4 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20090325-ctcp）以及相应补丁: cisco-sa-20090325-ctcp：Cisco IOS cTCP Denial of Service...

Design/Logic Flaw

Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...

CVE-2009-0635

Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...

CVE-2009-0635: Undefined Security Weakness

Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...

Cisco Security Advisory: Cisco IOS cTCP Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS cTCP Denial of Service Vulnerability Advisory ID: cisco-sa-20090325-ctcp http://www.cisco.com/warp/public/707/cisco-sa-20090325-ctcp.shtml Revision 1.0 For Public Release 2009 March 25 1600 UTC GMT -...

Cisco plugs IOS security holes

By Chuck Miller, SC Magazine Security updates for Cisco’s Internetwork Operating System IOS were released Wednesday scmagazine.com to shield against a number of vulnerabilities. The security issues cisco.com are varied and relate to TCP, UDP, mobile and VPN vulnerabilities. In describing one bug,...

Ken "Skywing" Johnson joins Microsoft security team

Microsoft has hired yet another well-known security researcher to join its ever-growing team of exploit and defense experts. This time it’s Ken Johnson, known in the hacker world as Skywing. Johnson is known as an expert on debugging and reverse engineering, and has done a tremendous amount of wo...

[SECURITY] Fedora 10 Update: NetworkManager-pptp-0.7.0.99-1.fc10

This package contains software for integrating PPTP VPN support with the NetworkManager and the GNOME desktop...

[SECURITY] Fedora 10 Update: NetworkManager-openconnect-0.7.0.99-1.fc10

This package contains software for integrating the openconnect VPN software with NetworkManager and the GNOME desktop...

[SECURITY] Fedora 10 Update: NetworkManager-vpnc-0.7.0.99-1.fc10

This package contains software for integrating the vpnc VPN software with NetworkManager and the GNOME desktop...

[SECURITY] Fedora 9 Update: NetworkManager-openconnect-0.7.0.99-1.fc9

This package contains software for integrating the openconnect VPN software with NetworkManager and the GNOME desktop...

[SECURITY] Fedora 9 Update: NetworkManager-pptp-0.7.0.99-1.fc9

This package contains software for integrating PPTP VPN support with the NetworkManager and the GNOME desktop...

[SECURITY] Fedora 9 Update: NetworkManager-vpnc-0.7.0.99-1.fc9

This package contains software for integrating the vpnc VPN software with NetworkManager and the GNOME desktop...

[Full-disclosure] Netgear SSL312 Router - remote DoS

Attached to this e-Mail is an advisory related to the Netgear SSL312 VPN router propably other devices of Netgear are affected as well but this has not been tested. The advisory can also be found at: http://www.helith.net/txt/netgearssl312remotedos.txt Dear netgear Team: Please consider working...

[Full-disclosure] Netgear SSL312 Router - remote DoS

/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2008-02-27 Affected Software: propietary CGI Affected OS : Netgear embedded Linux for...

Netgear SSL312 VPN router DoS

DoS thorugh Web interface...

Netgear embedded Linux for the SSL312 router DOS Vulnerability

Exploit for hardware platform in category dos / poc ============================================================== Netgear embedded Linux for the SSL312 router DOS Vulnerability ============================================================== / / / / / / / / / / / / / // / / / / / / / / / // / / / ...