openSUSE 10 Security Update : ipsec-tools (ipsec-tools-6302)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

Ubuntu: Security Advisory (USN-785-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : ipsec-tools vulnerabilities (USN-785-1)

It was discovered that ipsec-tools did not properly handle certain fragmented packets. A remote attacker could send specially crafted packets to the server and cause a denial of service. CVE-2009-1574 It was discovered that ipsec-tools did not properly handle memory usage when verifying certifica...

USN-785-1: ipsec-tools vulnerabilities

It was discovered that ipsec-tools did not properly handle certain fragmented packets. A remote attacker could send specially crafted packets to the server and cause a denial of service. CVE-2009-1574 It was discovered that ipsec-tools did not properly handle memory usage when verifying certifica...

Mandrake Security Advisory MDVSA-2009:112 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory MDVSA-2009:112. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:112 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory MDVSA-2009:112. OpenVAS Vulnerability Test $Id: mdksa2009112.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:112 ipsec-tools Authors: Thomas Reinke Copyright: Copyright c 2009...

strongSwan IKE请求多个拒绝服务漏洞

BUGTRAQ ID: 35178 strongSwan是Linux平台所使用的基于IPsec的开源VPN解决方案。 如果远程攻击者发送了特制的IKESAINIT和CREATECHILDSA请求，或发送了缺少TSi或TSr负载的IKEAUTH请求，就会在strongSwan的IKEv2 charon守护程序中触发空指针引用，导致拒绝服务。 strongSwan 4.1.0 - 4.3.0 厂商补丁： strongSwan ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

GLSA-200905-03 : IPSec Tools: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200905-03 IPSec Tools: Denial of Service The following vulnerabilities have been found in the racoon daemon as shipped with IPSec Tools: Neil Kettle reported that racoon/isakmpfrag.c is prone to a NULL pointer dereference...

Debian Security Advisory DSA 1804-1 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory DSA 1804-1. OpenVAS Vulnerability Test $Id: deb18041.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1804-1 ipsec-tools Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Gentoo Security Advisory GLSA 200905-03 (ipsec-tools)

The remote host is missing updates announced in advisory GLSA 200905-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Mandrake Security Advisory MDVSA-2009:114 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory MDVSA-2009:114. OpenVAS Vulnerability Test $Id: mdksa2009114.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:114 ipsec-tools Authors: Thomas Reinke Copyright: Copyright c 2009...

Debian: Security Advisory (DSA-1804-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200905-03 (ipsec-tools)

The remote host is missing updates announced in advisory GLSA 200905-03. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Mandrake Security Advisory MDVSA-2009:114 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory MDVSA-2009:114. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

IPSec Tools: Denial of service

Background The IPSec Tools are a port of KAME's IPsec utilities to the Linux-2.6 IPsec implementation. They include racoon, an Internet Key Exchange daemon for automatically keying IPsec connections. Description The following vulnerabilities have been found in the racoon daemon as shipped with...

Debian DSA-1804-1 : ipsec-tools - NULL pointer dereference, memory leaks

Several remote vulnerabilities have been discovered in racoon, the Internet Key Exchange daemon of ipsec-tools. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1574 Neil Kettle discovered a NULL pointer dereference on crafted fragmented packets that...

[SECURITY] [DSA 1804-1] New ipsec-tools packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1804-1 [email protected] http://www.debian.org/security/ Nico Golde May 20th, 2009 http://www.debian.org/security/faq -...

Fedora Core 9 FEDORA-2009-4291 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory FEDORA-2009-4291. OpenVAS Vulnerability Test $Id: fcore20094291.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-4291 ipsec-tools Authors: Thomas Reinke Copyright: Copyright c...

RedHat Security Advisory RHSA-2009:1036

The remote host is missing updates announced in advisory RHSA-2009:1036. The ipsec-tools package is used in conjunction with the IPsec functionality in the Linux kernel and includes racoon, an IKEv1 keying daemon. A denial of service flaw was found in the ipsec-tools racoon daemon. An...

CentOS Security Advisory CESA-2009:1036 (ipsec-tools)

The remote host is missing updates to ipsec-tools announced in advisory CESA-2009:1036. CESA-2009:1036 64016 2 $Id: ovcesa20091036.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1036 ipsec-tools Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...