Nortel VPN routers DoS

IKE packets with malformed ISAKMP header lead to crash or reboot...

[SA15548] Nortel VPN Routers IKE Packet Handling Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-1802

Nortel VPN Router aka Contivity allows remote attackers to cause a denial of service crash via an IPsec IKE packet with a malformed ISAKMP header...

CVE-2002-1623

The CVE-2002-1623 entry concerns the Internet Key Exchange (IKE) protocol: when using Aggressive Mode for shared secret authentication, identities are not encrypted during negotiation. This can allow remote attackers to determine valid usernames by monitoring responses before password entry or by...

CVE-2002-1623

The design of the Internet Key Exchange IKE protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote attackers to determine valid usernames by 1 monitoring responses before the password is...

CVE-2004-1457

The Virtual Private Network VPN capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service ABEND in IKE.NLM via a malformed IKE packet, as sent by the Striker ISAKMP Protocol Test Suite...

IKE Aggressive Exchange

...

CVE-2004-1457

The Virtual Private Network VPN capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service ABEND in IKE.NLM via a malformed IKE packet, as sent by the Striker ISAKMP Protocol Test Suite...

CVE-2004-0699

Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data...

CVE-2004-0699

CVE-2004-0699 describes a heap-based buffer overflow in the ASN.1 decoding library used by Check Point VPN-1 products when Aggressive Mode IKE is enabled. The root cause is a vulnerability in ASN.1 decoding that can be triggered by sending a malformed IKE packet after initiating a negotiation, al...

CVE-2001-0951

CVE-2001-0951 : Windows 2000 is affected. Vulnerability allows remote attackers to cause a denial of service by flooding the IKE UDP port 500 with packets containing a large number of dot characters, leading to CPU consumption. The connected records confirm Windows 2000 as the affected platform a...

CVE-2001-0951

Windows 2000 allows remote attackers to cause a denial of service CPU consumption by flooding Internet Key Exchange IKE UDP port 500 with packets that contain a large number of dot characters...

Novell Bordermanager VPN Service denial-of-service vulnerability

Overview A vulnerability exists in the Novell Bordermanager VPN service that could allow a remote attacker to cause a denial of service. Description The Novell Bordermanager product includes Virtual Private Network VPN capabilities, including support for the standard Internet Key Exchange IKE...

Check Point VPN-1 products contain boundary error in the ASN.1 decoding library

Overview A vulnerability exists in Check Point's VPN-1 Server, which is included in many Check Point products. This vulnerability may permit a remote attacker to compromise the gateway system. Description Check Point VPN-1 Server is a Virtual Private Network VPN application. A buffer overflow...

CVE-2004-0710

The CVE-2004-0710 vulnerability affects the Cisco VPNSM (IPsec VPN Services Module) used in Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Internet Routers. The issue arises when handling malformed Internet Key Exchange (IKE) packets, which could allow remote attackers to cause a denia...

Solaris 9 (sparc) : 113451-17

SunOS 5.9: IKE patch. Date this patch was last updated by Sun : Aug/09/10 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...

Cisco IPsec VPNSM vulnerable to DoS via malformed IKE packet

Overview A vulnerability in a Cisco VPN module can allow a remote attacker to cause a denial-of-service to the device in which the module is installed. Description The Cisco IP Security IPsec VPN Services Module VPNSM is a high-speed module for the Cisco Catalyst 6500 Series Switch and the Cisco...

CVE-2004-0155

The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509...

CVE-2004-0155

The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509...

CVE-2004-0392

racoon before 20040407b allows remote attackers to cause a denial of service infinite loop and dropped connections via an IKE message with a malformed Generic Payload Header containing invalid 1 "Security Association Next Payload" and 2 "RESERVED" fields...