CVE-2008-0915: Undefined Security Weakness

The Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 stores the number of remaining allowed login attempts in a cookie, which makes it easier for remote attackers to conduct brute force attacks by manipulating this cookie's value...

CVE-2008-0914: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

IP Diva VPN SSL multiple security vulnerabilities

Unlimited number of passwords attempts, CSS...

DOINGSOFT-2008-02-11 - IPDiva VPN SSL Brute force attack

ID : DOINGSOFT-2008-02-11-001 Discovered : 15/10/2007 ----------------- Corrected : 15/11/2007 ---------------- Publication :11/02/2008 ---------------- Affected Software : IPDiva VPNSSL Versions : Users who autenticate with login et passwd without OTP systems 2.2 branch 2.2.8.84 2.3 branch...

Design/Logic Flaw

The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials...

CVE-2008-0662

The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials...

CVE-2008-0662

The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials...

CVE-2008-0662

CVE-2008-0662 affects Check Point VPN-1 SecuRemote/SecureClient NGX for Windows (R60 and R56). The Auto Local Logon feature caches credentials in the Checkpoint\SecuRemote registry key which has Everyone/Full Control permissions, enabling local users to read and reuse credentials to gain privileg...

CVE-2008-0662: Incorrect Permission Assignment for Critical Resource

The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials...

SonicWALL Global VPN Client Detection

The SonicWALL Global VPN Client is installed on the remote system. This software can be used to establish secure remote connections. Script Written By Ferdy Riphagen Script distributed under the GNU GPLv2 License. Tenable grants a special exception for this plugin to use the library 'smbfunc.inc'...

CVE-2008-0331

Unspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk Router / VPN devices allows remote attackers to cause a denial of service panic and reboot via unspecified DNS requests...

Memory corruption

Cisco Systems VPN Client IPSec Driver CVPNDRVA.sys 5.0.02.0090 allows local users to cause a denial of service crash by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption...

CVE-2008-0324

Cisco Systems VPN Client IPSec Driver CVPNDRVA.sys 5.0.02.0090 allows local users to cause a denial of service crash by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption...

CVE-2008-0324

CVE-2008-0324 affects the Cisco VPN Client for Windows, specifically the IPSec Driver CVPNDRVA.sys (v5.0.02.0090). The vulnerability allows a local attacker to crash the system (DoS) by issuing IOCTL 0x80002038 with a small size value, triggering memory corruption in the driver. The issue is desc...

CVE-2008-0324

Cisco Systems VPN Client IPSec Driver CVPNDRVA.sys 5.0.02.0090 allows local users to cause a denial of service crash by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption...

CVE-2008-0324: Undefined Security Weakness

Cisco Systems VPN Client IPSec Driver CVPNDRVA.sys 5.0.02.0090 allows local users to cause a denial of service crash by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption...

Debian Security Advisory DSA 104-1 (cipe)

The remote host is missing an update to cipe announced via advisory DSA 104-1. OpenVAS Vulnerability Test $Id: deb1041.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 104-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 295-1 (pptpd)

The remote host is missing an update to pptpd announced via advisory DSA 295-1. OpenVAS Vulnerability Test $Id: deb2951.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 295-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 104-1 (cipe)

The remote host is missing an update to cipe announced via advisory DSA 104-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-295)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...