CVE-2005-0844: Undefined Security Weakness

Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sensitive information...

Nortel VPN Client Issue: Clear-text password stored in memory

Nortel VPN Client Issue: Clear-text password stored in memory Summary: NTA Monitor have discovered a password disclosure issue in the Nortel Windows VPN client: The Nortel client stores the password in an obfuscated form in the Windows registry, but it also stores the unencrypted password in...

Nortel VPN client weak encryption

Cleartext password is stored in memory...

Aventail ASAP Platform Management Console Detection

The remote host seems to be an Aventail SSL VPN appliance, and it allows connections to its web console management. Letting attackers know that you are using such a device will help them to focus their attacks or will make them change their strategy. In addition to this, an attacker may attempt a...

CVE-2005-0618

The issue is a load-balancing defect in SMTP binding on several Symantec/Nexland devices that can cause outbound SMTP traffic intended for a trusted network to be sent over an untrusted path when two WANs are used. Affected products and firmware: Symantec Firewall/VPN Appliance 200/200R (before 1...

CVE-2005-0618: Undefined Security Weakness

The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network...

Check Point VPN-1 SecureClient - IP Address Local Memory Access

Check Point VPN-1 SecureClient - IP Address Local Memory Access source: https://www.securityfocus.com/bid/12571/info VPN-1 SecureClient is reported prone to a vulnerability that may allow local attackers to disclose sensitive memory. This can lead to various other attacks against a vulnerable...

Check Point VPN-1 SecureClient - IP Address Local Memory Access

source: https://www.securityfocus.com/bid/12571/info VPN-1 SecureClient is reported prone to a vulnerability that may allow local attackers to disclose sensitive memory. This can lead to various other attacks against a vulnerable computer. The vulnerability exists in the 'SRService.exe', which...

CVE-2004-1483

The CVE covers multiple unknown vulnerabilities in the ActiveX and HTML file browsers of Symantec Clientless VPN Gateway 4400 Series 5.0. The description indicates unknown attack vectors and unknown impact; no details on root cause, affected versions beyond 5.0, exploits, or remediation are provi...

CVE-2004-1483

Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact...

CVE-2004-1473

CVE-2004-1473 affects Symantec Enterprise Firewall/VPN Appliances (models 100, 200, 200R) and Gateway Security devices (320, 360, 360R) with firmware versions before 1.63 (or 622 respectively). The issue allows remote attackers to bypass filtering and determine if services such as tftpd, snmpd, o...

CVE-2004-1457

The CVE-2004-1457 description indicates a vulnerability in the VPN capability of Novell Bordermanager 3.8, where remote attackers can cause a denial-of-service (ABEND in IKE.NLM) by sending a malformed IKE packet, as tested by the Striker ISAKMP Protocol Test Suite. The available sources specify ...

CVE-2004-1474

This CVE pertains to Symantec Enterprise Firewall/VPN Appliances (models 100, 200, 200R) with firmware before 1.63 and Gateway Security appliances (320, 360, 360R) with firmware before 622. The underlying issue is a default read/write SNMP community string, which lets an unauthenticated remote at...

CVE-2004-1472

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R with firmware older than 1.63 are vulnerable to a remote denial of service (device freeze) via a fast UDP port scan on the WAN interface. The available sources confirm the affected models and firmware range but do not provide addition...

CVE-2004-1483: Undefined Security Weakness

Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact...

CVE-2004-1473: Undefined Security Weakness

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP...

CVE-2004-1457: Undefined Security Weakness

The Virtual Private Network VPN capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service ABEND in IKE.NLM via a malformed IKE packet, as sent by the Striker ISAKMP Protocol Test Suite...

CVE-2004-1474: Undefined Security Weakness

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file...

CVE-2004-1472: Undefined Security Weakness

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service device freeze via a fast UDP port scan on the WAN interface...

CVE-2005-0346

The CVE-2005-0346 entry concerns SafeNet SoftRemote VPN Client, where the VPN pre-shared key/password is stored in cleartext in memory within the IreIKE.exe process. This creates a local-access data exposure: any user with access to the IreIKE.exe process can read the password. The vulnerability ...