Cisco VPN Concentrator LAN-to-LAN IPSEC Tunnel Termination DoS (Bug ID CSCdx54675)

Binary data 2237.prm...

Cisco VPN Concentrator LAN-to-LAN IPSEC Tunnel Termination DoS (Bug ID CSCdx54675)

Binary data 2239.prm...

Cisco VPN Concentrator LAN-to-LAN IPSEC Tunnel Termination DoS (Bug ID CSCdx54675)

Binary data 2238.prm...

CVE-2002-1092

Cisco VPN 3000 Concentrator 3.6Rel and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication...

CVE-2002-1102

CVE-2002-1102 affects Cisco VPN 3000 Concentrator LAN-to-LAN IPSEC capability (versions 2.2.x and 3.x before 3.5.4). A remote attacker can trigger a denial of service by initiating a LAN-to-LAN connection that conflicts with an existing security association, causing the concentrator to terminate ...

CVE-2002-1092

CVE-2002-1092 affects Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, where using internal authentication with group accounts and no user accounts allows remote VPN clients to log in via PPTP or IPSEC user authentication. Root cause identified in multiple advisories for the Cisco VPN...

GLSA-200404-17 : ipsec-tools and iputils contain a remote DoS vulnerability

The remote host is affected by the vulnerability described in GLSA-200404-17 ipsec-tools and iputils contain a remote DoS vulnerability When racoon receives an ISAKMP header, it allocates memory based on the length of the header field. Thus, an attacker may be able to cause a Denial of Services b...

GLSA-200404-05 : ipsec-tools contains an X.509 certificates vulnerability.

The remote host is affected by the vulnerability described in GLSA-200404-05 ipsec-tools contains an X.509 certificates vulnerability. racoon a utility in the ipsec-tools package does not verify digital signatures on Phase1 packets. This means that anybody holding the correct X.509 certificate...

GLSA-200406-17 : IPsec-Tools: authentication bug in racoon

The remote host is affected by the vulnerability described in GLSA-200406-17 IPsec-Tools: authentication bug in racoon The KAME IKE daemon racoon is used to authenticate peers during Phase 1 when using either preshared keys, GSS-API, or RSA signatures. When using RSA signatures racoon validates t...

GLSA-200406-20 : FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling

The remote host is affected by the vulnerability described in GLSA-200406-20 FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling All these IPsec implementations have several bugs in the verifyx509cert function, which performs certificate validation, that make them vulnerable ...

Multiple memory leak vulnerabilities in isakmpd

Overview Multiple memory handling vulnerabilities exist in the isakmpd that could allow a remote attacker to cause a denial of service. Description The OpenBSD isakmpd establishes security associations for encrypted and authenticated IPsec network traffic. It implements the Internet Security...

isakmpd fails to handle ISAKMP packets with "Payload Length" of zero

Overview A vulnerability exists in the isakmpd that could allow a remote attacker to cause a denial of service. Description The OpenBSD isakmpd establishes security associations for encrypted and authenticated IPsec network traffic. It implements the Internet Security Association and Key Manageme...

Integer underflow vulnerability in isakmpd "Certificate Request Payload" handling

Overview A vulnerability exists in the isakmpd that could allow a remote attacker to cause a denial of service. Description The OpenBSD isakmpd establishes security associations for encrypted and authenticated IPsec network traffic. It implements the Internet Security Association and Key Manageme...

AIX 5.1 : IY37069

The remote host is missing AIX Critical Security Patch number IY37069 SECURITY: Inadequate validation in IPsec packets. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Mandrake Linux Security Advisory : ipsec-tools (MDKSA-2004:027)

A very serious security flaw was discovered by Ralf Spenneberg in racoon, the IKE daemon of the KAME-tools. Racoon does not very the RSA signature during phase one of a connection using either main or aggressive mode. Only the certificate of the client is verified, the certificate is not used to...

RHEL 3 : ipsec-tools (RHSA-2004:308)

An updated ipsec-tools package that fixes verification of X.509 certificates in racoon is now available. IPSEC uses strong cryptography to provide both authentication and encryption services. When configured to use X.509 certificates to authenticate remote hosts, ipsec-tools versions 0.3.3 and...

Important: Red Hat Security Advisory: ipsec-tools security update

An updated ipsec-tools package that fixes verification of X.509 certificates in racoon is now available. IPSEC uses strong cryptography to provide both authentication and encryption services. When configured to use X.509 certificates to authenticate remote hosts, ipsec-tools versions 0.3.3 and...

Fedora Core 2 : ipsec-tools-0.2.5-4 (2004-197)

When configured to use X.509 certificates to authenticate remote hosts, ipsec-tools versions 0.3.3 and earlier will attempt to verify that host certificate, but will not abort the key exchange if the verification fails. Users of ipsec-tools should upgrade to this updated package which contains a...

Fedora Core 2 : ipsec-tools-0.2.5-2 (2004-132)

An updated ipsec-tools package that fixes vulnerabilities in racoon the ISAKMP daemon is now available. When ipsec-tools receives an ISAKMP header, it will attempt to allocate sufficient memory for the entire ISAKMP message according to the header's length field. If an attacker crafts an ISAKMP...

RHEL 3 : ipsec-tools (RHSA-2004:165)

An updated ipsec-tools package that fixes vulnerabilities in racoon the ISAKMP daemon is now available. IPSEC uses strong cryptography to provide both authentication and encryption services. With versions of ipsec-tools prior to 0.2.3, it was possible for an attacker to cause unauthorized deletio...