CVE-2009-1943

CVE-2009-1943 pertains to SafeNet SoftRemote: the IKE service (ireIKE.exe) on affected versions up to 10.8.5 (pre-10.8.6) is vulnerable to a stack-based buffer overflow triggered by a crafted UDP payload to port 62514, allowing remote code execution. The vulnerability is widely cited across multi...

strongSwan IKE请求多个拒绝服务漏洞

BUGTRAQ ID: 35178 strongSwan是Linux平台所使用的基于IPsec的开源VPN解决方案。 如果远程攻击者发送了特制的IKESAINIT和CREATECHILDSA请求，或发送了缺少TSi或TSr负载的IKEAUTH请求，就会在strongSwan的IKEv2 charon守护程序中触发空指针引用，导致拒绝服务。 strongSwan 4.1.0 - 4.3.0 厂商补丁： strongSwan ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Solaris Update for IKE 113451-15

Check for the Version of IKE OpenVAS Vulnerability Test Solaris Update for IKE 113451-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

Solaris Update for ike hardware - config.sample 114436-01

Check for the Version of ike hardware - config.sample OpenVAS Vulnerability Test Solaris Update for ike hardware - config.sample 114436-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for IKE 114435-14

Check for the Version of IKE OpenVAS Vulnerability Test Solaris Update for IKE 114435-14 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

Solaris Update for IKE 113451-15

Check for the Version of IKE OpenVAS Vulnerability Test Solaris Update for IKE 113451-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

Solaris Update for IKE config.sample 114125-01

Check for the Version of IKE config.sample OpenVAS Vulnerability Test Solaris Update for IKE config.sample 114125-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for IKE config.sample 114125-01

Check for the Version of IKE config.sample OpenVAS Vulnerability Test Solaris Update for IKE config.sample 114125-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for IKE 114435-14

Check for the Version of IKE OpenVAS Vulnerability Test Solaris Update for IKE 114435-14 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

Solaris Update for ike hardware - config.sample 114436-01

Check for the Version of ike hardware - config.sample OpenVAS Vulnerability Test Solaris Update for ike hardware - config.sample 114436-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Safenet SoftRemote buffer overflow

Buffer overflow in UDP/62514 port IKE service...

Safenet SoftRemote IKE Service Remote Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Safenet Softremote IKE VPN service. Authentication is not required to exploit this vulnerability. The specific flaw exists in the ireIke.exe service listening on UDP port 62514. The process doe...

Security fix for the ALT Linux 6 package strongswan version 4.2.14-alt1

May 13, 2009 Michael Shigorin 4.2.14-alt1 - 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code - fixed FTBFS with glibc-2.9 - appled vendor patch fixing invalid IKE state issue...

Security fix for the ALT Linux 5 package strongswan version 4.2.14-alt1

May 13, 2009 Michael Shigorin 4.2.14-alt1 - 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code - fixed FTBFS with glibc-2.9 - appled vendor patch fixing invalid IKE state issue...

Security fix for the ALT Linux 7 package strongswan version 4.2.14-alt1

May 13, 2009 Michael Shigorin 4.2.14-alt1 - 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code - fixed FTBFS with glibc-2.9 - appled vendor patch fixing invalid IKE state issue...

openswan security update

CentOS Errata and Security Advisory CESA-2009:0402 Updated openswan packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation o...

RedHat Security Advisory RHSA-2009:0402

The remote host is missing updates announced in advisory RHSA-2009:0402. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

RedHat Security Advisory RHSA-2009:0402

The remote host is missing updates announced in advisory RHSA-2009:0402. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

CVE-2009-0790

The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service daemon crash and restart via a crafted 1 RUTHERE or 2 RUTHEREACK Dead Peer Detection DPD IPsec...

Null pointer dereference

The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service daemon crash and restart via a crafted 1 RUTHERE or 2 RUTHEREACK Dead Peer Detection DPD IPsec...