NCP VPN/PKI Client - various Bugs

Application: NCP VPN/PKI Client Site: http://www.ncp.de Version: 8.11, Build 146 and maybe lower OS: Windows Bugs: Local Privilige Escalation, DoS and other Product: ======== NCP's Secure Communications provides a comprehensive portfolio of products for implementing total solutions for...

L2TP VPN Server Detection

Binary data 3408.prm...

L2TP VPN Client Detection

Binary data 3407.prm...

Re: [VulnWatch] Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack

With respect to: http://archives.neohapsis.com/archives/vulnwatch/2006-q1/0036.html I'm the person who discovered this particular Cisco VPN vulnerability and divulged some details at the end of my talk at Shmoocon - not "Schmoocon" as the original advisory spells it. The exploit involves sending ...

CVE-2006-0483

Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service device reload or user disconnect via a crafted HTTP packet...

CVE-2006-0483

CVE-2006-0483 affects Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A. The vulnerability allows remote attackers to cause a denial of service (device reload or user disconnect) by sending a crafted HTTP packet. The incident is categorized with network access, no authent...

CVE-2006-0483

Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service device reload or user disconnect via a crafted HTTP packet...

CVE-2006-0483: Undefined Security Weakness

Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service device reload or user disconnect via a crafted HTTP packet...

Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack

...

[Full-disclosure] Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack Advisory ID: cisco-sa-20060126-vpn http://www.cisco.com/warp/public/707/cisco-sa-20060126-vpn.shtml Revision 1.0 For Public Release 2006 January 26 1700 UTC GMT...

Cisco VPN Concentrator 3000 < 4.7.3 Crafted HTTP Packet DoS

Binary data 3382.prm...

Design/Logic Flaw

Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length...

CVE-2006-0309

Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length...

CVE-2006-0309

The CVE-2006-0309 entry affects Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04. The vulnerability allows remote attackers on the local network to cause a denial of service by sending IP packets with a null IP option length. Connected records (NVD/CVE) confirm the affected device and the att...

CVE-2006-0309

Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length...

CVE-2006-0309: Undefined Security Weakness

Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length...

CVE-2006-0255

Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when SecureClient attempts to launch the SrGUI.exe program...

CVE-2006-0255

Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient could allow local privilege escalation via a malicious program.exe placed in the C:\ folder, which is executed when SecureClient launches Sr_GUI.exe. Affected product: Check Point VPN-1 SecureClient. Root cause: unquoted...

CVE-2006-0255

Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when SecureClient attempts to launch the SrGUI.exe program...

CVE-2006-0255: Undefined Security Weakness

Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when SecureClient attempts to launch the SrGUI.exe program...