CVE-2011-1547

CVE-2011-1547 affects NetBSD-derived IPComp/IPsec stacks. Affected: NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1. Root cause: kernel handling of nested IPComp payloads can overflow the stack, leading to remote memory corruption and panics; some sources describe pre-auth kernel memory corrup...

BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload

BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload ------------------------------------------------------------------------------- Gruezi, this document describes CVE-2011-1547. RFC3173 ip payload compression, henceforth ipcomp, is a protocol intended to provide...

Multiple BSD systems IPSec IP Compression stack overflow

kernel stack overflow on packet parsing...

IPComp encapsulation pre-auth kernel memory corruption

Exploit for bsd platform in category dos / poc from: http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080031.html BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload ------------------------------------------------------------------------------- Gruezi, th...

IPComp - encapsulation Kernel Memory Corruption

IPComp - encapsulation Kernel Memory Corruption // source: http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080031.html BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload -------------------------------------------------------------------------------...

IPComp - encapsulation Kernel Memory Corruption

// source: http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080031.html BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload ------------------------------------------------------------------------------- Gruezi, this document describes CVE-2011-1547. RFC31...

Cisco IPSec information leak

It's possible to check groupname existance...

NGS00014 Technical Advisory: Cisco IPSec VPN Implementation Group Name Enumeration

======= Summary ======= Name: Cisco IPSec VPN Implementation Group Name Enumeration Release Date: 22 March 2011 Reference: NGS00014 Discoverer: Gavin Jones Vendor: Cisco Vendor Reference: CSCei51783, CSCtj96108 Systems Affected: ASA 5500 Series Adaptive Security Appliances -Cisco PIX 500 Series...

kernel security, bug fix, and enhancement update

2.6.32-71.18.1.el6 - netdrv ixgbe: make sure FCoE DDP user buffers are really released by the HW Frantisek Hrbata 674002 617193 - netdrv ixgbe: invalidate FCoE DDP context when no error status is available Frantisek Hrbata 674002 617193 - netdrv ixgbe: avoid doing FCoE DDP when adapter is DOWN or...

SuSE 10 Security Update : Novell ipsec tools (ZYPP Patch Number 6306)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 10 Security Update : novell-ipsec (ZYPP Patch Number 5888)

Remote attackers could exploit memory leaks in the 'racoon' daemon to crash it. CVE-2008-3651 / CVE-2008-3652 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash via a large number of LAN-to-LAN aka L2L IPsec sessions, aka Bug ID CSCth36592...

CVE-2010-4692

CVE-2010-4692 affects Cisco ASA 5500-series devices running software before 8.3(2). The vulnerability allows a remote attacker to cause a denial-of-service (device crash) by initiating a large number of LAN-to-LAN IPsec sessions (L2L), per Bug ID CSCth36592. Affected component is the IPsec/L2L ha...

CVE-2010-4676

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote authenticated users to cause a denial of service device crash via a high volume of IPsec traffic, aka Bug ID CSCsx52748...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote authenticated users to cause a denial of service device crash via a high volume of IPsec traffic, aka Bug ID CSCsx52748...

CVE-2010-4676

Cisco ASA 5500 series devices running software before 8.2(3) are affected by CVE-2010-4676. The issue allows remote authenticated users to cause a denial of service (device crash) by sending a high volume of IPsec traffic, identified as Bug ID CSCsx52748. The PT-2011-1631 entry confirms the vulne...

CVE-2010-4676

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote authenticated users to cause a denial of service device crash via a high volume of IPsec traffic, aka Bug ID CSCsx52748...

Microsoft Windows IPsec Policy Processing Information Disclosure Vulnerability (953733)

This host is missing a critical security update according to Microsoft Bulletin MS08-047. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows IPsec Policy Processing Information Disclosure Vulnerability (953733)

This host is missing a critical security update according to Microsoft Bulletin MS08-047. OpenVAS Vulnerability Test $Id: gbms08-047.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows IPsec Policy Processing Information Disclosure Vulnerability 953733 Authors: Madhuri D Copyright: Copyrig...

Experts: OpenBSD Backdoor Allegations 'Almost Certainly False'

The incredible allegations that developers working under the auspices of the FBI and Justice Department planted a backdoor in the IPSec stack of the OpenBSD operating system are likely just that, experts say: not credible. “There is no way that the FBI paid anyone to create backdoors in OpenBSD a...