SuSE 10 Security Update : ipsec-tools (ZYPP Patch Number 6301)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

Openswan: Denial of service

Background Openswan is an implementation of IPsec for Linux. Description Multiple vulnerabilities have been discovered in Openswan: Gerd v. Egidy reported a NULL pointer dereference in the Dead Peer Detection of the pluto IKE daemon as included in Openswan CVE-2009-0790. The Orange Labs...

TheGreenBow IPSec VPN Client Denial Of Service Vulnerability

TheGreenBow IPSec VPN Client is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TheGreenBow IPSec VPN Client Version Detection

Detects the installed version of TheGreenBow IPSec VPN Client on Windows. The script logs in via smb, searches for TheGreenBow IPSec VPN Client in the registry, gets the from registry. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, an...

TheGreenBow IPSec VPN客户端TgbVPN.sys拒绝服务漏洞

TheGreenBow IPSec VPN Client是一款流行的VPN客户端。 TheGreenBow IPSec VPN客户端TgbVPN.sys内核驱动处理IOCTLs时存在NULL指针引用错误，本地攻击者可以利用漏洞发送0x80000034 IOCTL使系统崩溃。 TheGreenBow IPSec VPN Client 4.x 目前没有详细解决方案提供： http://www.thegreenbow.com/vpn.html...

CVE-2009-2918

The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer size of 0...

CVE-2009-2918

The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer size of 0...

CVE-2009-2918

The GreenBow IPSec VPN Client (tgbvpn.sys) is affected by CVE-2009-2918. The vulnerability allows local users to cause a denial of service via a crafted request to IOCTL 0x80000034, likely involving an input/output buffer size of 0 and triggering a NULL pointer dereference that crashes the system...

openSUSE Security Update : ipsec-tools (ipsec-tools-223)

Remote attackers could exploit memory leaks in the 'racoon' daemon to crash it CVE-2008-3651, CVE-2008-3652 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ipsec-tools-223. The text descriptio...

openSUSE Security Update : ipsec-tools (ipsec-tools-996)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : novell-ipsec-tools (novell-ipsec-tools-389)

Remote attackers could exploit memory leaks in the 'racoon' daemon to crash it CVE-2008-3651, CVE-2008-3652 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update novell-ipsec-tools-389. The text...

openSUSE Security Update : ipsec-tools (ipsec-tools-996)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : novell-ipsec-tools (novell-ipsec-tools-1007)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

Openswan <= 2.4.12/2.6.16 Insecure Temp File Creation Root Exploit

Exploit for linux platform in category local exploits ================================================================== Openswan /etc/passwd' /tmp/ipseclive.conn rm /tmp...

[SECURITY] Fedora 11 Update: openswan-2.6.21-5.fc11

Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 10 Update: openswan-2.6.21-2.fc10

Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

RedHat Security Advisory RHSA-2009:1138

The remote host is missing updates announced in advisory RHSA-2009:1138. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

RedHat Security Advisory RHSA-2009:1138

The remote host is missing updates announced in advisory RHSA-2009:1138. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

RHEL 5 : openswan (RHSA-2009:1138)

Updated openswan packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Ke...

openswan security update

CentOS Errata and Security Advisory CESA-2009:1138 Updated openswan packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation ...