NetBSD Security Advisory 2004-010: Insufficient argument validation in compat code

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-010 ================================= Topic: Insufficient argument validation in compat code Version: NetBSD-current: source prior to Oct 27, 2004 NetBSD 2.0: not affected NetBSD 1.6.2: affected NetBSD 1.6.1: affected NetBSD 1.6:...

Buffer overflow in multiple RADIUS implementations

Multiple buffer overflows...

amap (NASL wrapper)

This plugin runs amap to find open ports and identify applications on the remote host. See the section 'plugins options' to configure it. TRUSTED...

FreeBSD : Vulnerabilities in H.323 implementations (63)

The following package needs to be updated: asterisk %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg27c331d564c711d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

[ GLSA 200406-20 ] FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200406-20 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling

Background FreeS/WAN, Openswan, strongSwan and Super-FreeS/WAN are Open Source implementations of IPsec for the Linux operating system. They are all based on the discontinued FreeS/WAN project. Description All these IPsec implementations have several bugs in the verifyx509cert function, which...

Loom Software SurfNow 1.x2.x - GET Remote Denial of Service

Loom Software SurfNow 1.x2.x - GET Remote Denial of Service source: https://www.securityfocus.com/bid/9519/info A problem has been identified in the handling of specific types of requests by SurfNOW. Upon receiving specially crafted HTTP GET requests, it is possible for a remote attacker to crash...

Multiple Open Software Foundation Distributed Computing Environment (DCE) implementations vulnerable to DoS

Overview A denial-of-service vulnerability exists in multiple vendor implementations of the Distributed Computing Environment. This vulnerability may allow a remote attacker to cause the service to fail. Note that this vulnerability may be triggered by attackers attempting to exploit VU568148 and...

CVE-2002-0414: Undefined Security Weakness

KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database SPD, which could cause a Security Gateway SG that does not use Encapsulating Security Payload ESP to forward forged IPv4 packets...

DSA-201 freeswan - denial of service

Bulletin has no description...

Multiple Sun RPC-based libc implementations fails to provide time-out mechanism when reading data from TCP connections

Overview A denial-of-service vulnerability exists in multiple vendor Sun RPC-based libc implementations. Description Multiple vendor Sun RPC-based libc implementations fail to properly read data from TCP connections. As a result, a remote attacker can deny service to system daemons. --- Impact A...

CVE-2002-0414

KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database SPD, which could cause a Security Gateway SG that does not use Encapsulating Security Payload ESP to forward forged IPv4 packets...

CVE-2001-1377

CVE-2001-1377 affects multiple RADIUS implementations that fail to validate the Vendor-Length of Vendor-Specific attributes, enabling a remote attacker to crash the server when Vendor-Length

route of #phrack is a funny man!

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note to Moderator: Woops, GOBBLES drink too much boxed wine today... here important advisory ALERT! ALERT! Multiple vendor talkd vulnerability ALERT! ALERT! Forward Certain phrack op have big mouth and do stuff like /topic phrack www.bugtraq.org stuff...

CVE-2001-1244

Multiple TCP implementations could allow remote attackers to cause a denial of service bandwidth and CPU exhaustion by setting the maximum segment size MSS to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traff...

EUVD-2001-1225

Multiple TCP implementations could allow remote attackers to cause a denial of service bandwidth and CPU exhaustion by setting the maximum segment size MSS to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traff...

CVE-2001-1377

Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service crash via a Vendor-Length that is less than 2...

CVE-2001-1376

Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data...

CVE-2001-1244

Multiple TCP implementations could allow remote attackers to cause a denial of service bandwidth and CPU exhaustion by setting the maximum segment size MSS to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traff...

DNS implementations vulnerable to denial-of-service attacks via malformed DNS queries

Overview Incorrect decoding of malformed DNS packets causes certain DNS implementations to hang or crash. Description RFC1035 DOMAIN NAMES, IMPLEMENTATION AND SPECIFICATION defines a mechanism for conserving bytes in a DNS query or reply packet by avoiding repetition of character strings "labels"...