9983 matches found
CVE-2002-0047
CVE-2002-0047 affects the CIPE VPN package; the Debian advisory notes a bug in CIPE’s packet handling where a received packet that is too short could crash the process. Affected version: CIPE prior to 1.3.0-3. The Debian DSA-104-1 advisory (and OpenVAS NASL) describe this as a DoS via a short mal...
CVE-2001-0940
Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name...
CVE-2001-1158
Affected software: Check Point VPN-1/FireWall-1 (version 4.0 and 4.1 per CERT) with the default macro accept_fw1_rdp in base.def. Vulnerability: A forged RDP header sent over UDP port 259 can bypass firewall restrictions, allowing traffic to arbitrary hosts. This is achieved by abusing RDP suppor...
CVE-2001-1176
Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection...
CVE-2001-1158
Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, acceptfw1rdp, which can allow remote attackers to bypass intended restrictions with forged RDP internal protocol headers to UDP port 259 of arbitrary hosts...
CVE-2001-0940
Technical details about CVE-2001-0940 are not publicly available in the provided documents; monitor for updates.
CVE-2001-1176: Undefined Security Weakness
Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection...
CVE-2002-0047: Undefined Security Weakness
CIPE VPN package before 1.3.0-3 allows remote attackers to cause a denial of service crash via a short malformed packet...
CVE-2001-1158: Undefined Security Weakness
Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, acceptfw1rdp, which can allow remote attackers to bypass intended restrictions with forged RDP internal protocol headers to UDP port 259 of arbitrary hosts...
CVE-2001-0940: Undefined Security Weakness
Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name...
[AP] Cisco vpnclient buffer overflow
-- ------------------------- -- - AngryPacket Security Advisory - -- ------------------------- -- - +--------------------- -- - + advisory information +------------------ -- - author: methodic [email protected] release date: 05/28/2002 homepage: http://sec.angrypacket.com advisory...
Buffer overfrlow in Cisco vpnclient
Buffer overflow on long profile name...
Security Advisory: Buffer Overflow in UNIX VPN Client
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Buffer Overflow in UNIX VPN Client Revision 1.0 For Public Release 2002 June 19 at 14:00 GMT - --------------------------------------------------------------------------- Contents Summary Affected Products Details Impact Software Version...
Buffer Overflow in UNIX VPN Client
...
Cisco VPN Client for Unix 3.5.1 - Local Buffer Overflow
Cisco VPN Client for Unix 3.5.1 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/5056/info The Cisco VPN Client software is used to establish Virtual Private Network VPN connections between client machines and a Cisco VPN Concentrator. A vulnerability has been reported in some...
Cisco VPN Client for Unix 3.5.1 - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/5056/info The Cisco VPN Client software is used to establish Virtual Private Network VPN connections between client machines and a Cisco VPN Concentrator. A vulnerability has been reported in some versions of the VPN Client. If an oversized profile nam...
CVE-2002-0426
VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys...
CVE-2002-0426
CVE-2002-0426 affects the Linksys EtherFast BEFVP41 Cable/DSL VPN Router (VPN Server module) prior to firmware version 1.40.1. The issue: the router reduces key lengths for keys entered manually, making it easier to crack keys. The NVD entry notes a network attack vector with low attack complexit...
CVE-2002-0426: Undefined Security Weakness
VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys...
