308 matches found
Debian Security Advisory DSA 1899-1 (strongswan)
The remote host is missing an update to strongswan announced via advisory DSA 1899-1. OpenVAS Vulnerability Test $Id: deb18991.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1899-1 strongswan Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Debian: Security Advisory (DSA-1899-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DSA-1899-1 strongswan - denial of service
Bulletin has no description...
CVE-2009-1957
charon/sa/ikesa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid IKESAINIT request that triggers "an incomplete state," followed by a CREATECHILDSA request...
Null pointer dereference
charon/sa/ikesa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid IKESAINIT request that triggers "an incomplete state," followed by a CREATECHILDSA request...
Design/Logic Flaw
charon/sa/tasks/childcreate.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKEAUTH request without a 1 TSi or 2 TSr traffic selector...
CVE-2009-1957
charon/sa/ikesa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid IKESAINIT request that triggers "an incomplete state," followed by a CREATECHILDSA request...
CVE-2009-1958
charon/sa/tasks/childcreate.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKEAUTH request without a 1 TSi or 2 TSr traffic selector...
DEBIAN-CVE-2009-1958
charon/sa/tasks/childcreate.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKEAUTH request without a 1 TSi or 2 TSr traffic selector...
CVE-2009-1958
charon/sa/tasks/childcreate.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKEAUTH request without a 1 TSi or 2 TSr traffic selector...
DEBIAN-CVE-2009-1957
charon/sa/ikesa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid IKESAINIT request that triggers "an incomplete state," followed by a CREATECHILDSA request...
CVE-2009-1957
charon/sa/ikesa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid IKESAINIT request that triggers "an incomplete state," followed by a CREATECHILDSA request...
CVE-2009-1958
CVE-2009-1958 affects the strongSwan charon daemon; remote crash when processing crafted IKEv2 packets, leading to denial of service. Debian/OSS advisories note fixes across oldstable through sid: etch: 2.8.0+dfsg-1+etch2, stable (lenny): 4.2.4-5+lenny3, sid: 4.3.2-1.1. OpenVAS entries similarly ...
CVE-2009-1958
charon/sa/tasks/childcreate.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKEAUTH request without a 1 TSi or 2 TSr traffic selector...
CVE-2009-1957
charon/sa/ikesa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid IKESAINIT request that triggers "an incomplete state," followed by a CREATECHILDSA request...
CVE-2009-1958
charon/sa/tasks/childcreate.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKEAUTH request without a 1 TSi or 2 TSr traffic selector...
strongSwan IKE请求多个拒绝服务漏洞
BUGTRAQ ID: 35178 strongSwan是Linux平台所使用的基于IPsec的开源VPN解决方案。 如果远程攻击者发送了特制的IKESAINIT和CREATECHILDSA请求，或发送了缺少TSi或TSr负载的IKEAUTH请求，就会在strongSwan的IKEv2 charon守护程序中触发空指针引用，导致拒绝服务。 strongSwan 4.1.0 - 4.3.0 厂商补丁： strongSwan ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
strongSwan 'mpz_export()'远程拒绝服务漏洞
BUGTRAQ ID: 31291 CNCAN ID：CNCAN-2008092409 strongSwan是一款开放源代码的基于IPsec的VPN解决方案。 strongSwan 'mpzexport'函数处理存在问题，远程攻击者可以利用漏洞对IKEv2 charon守护进程进行拒绝服务攻击。 如果发送使用包含很多NULL值的KEY交换负载的IKESAINIT消息，可导致IKEv2 charon崩溃。问题是strongSwan引用使用GNU多倍精度库GMP中的mpzexport函数返回的NULL指针而触发的。 strongSwan 4.2.6 strongSwan...
CharonCartv3.txt
Vulnerability Report Title : Charon Cart v3Review.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.charon.co.uk Exploit; http://target/path/Review.asp?ProductID=SQL HERE Example:...