Cisco HSRP Weakness/DoS

Hi I was playing with Cisco's HSRP Hot Standby Routing Protocol, and there is a major weakness in that protocol that allow any host in a LAN segment to make a HSRP DoS. Short very explain of HSRP. HSRP uses UDP on port 1985 to multicast address 224.0.0.2, and the authentication is in clear text...

Nortel CES (3DES version) offers false sense of security when using IPSEC

Short summary: Nortel Networks Contivity Extranet Switch CES has a weakness in it's IPSEC key exchange when using 3DES encryption. The 3DES encryption keys are encrypted using single DES during initial key exchange thus reducing cryptographic strength to 56-bit DES level. The weakness affects bot...

CVE-2000-0962

The CVE-2000-0962 entry concerns OpenBSD 2.7 IPSEC, where the implementation mishandles empty AH/ESP packets. This underpins a denial of service when processing such packets, with an impact described as partial availability. The available sources (NVD/CVE records) repeat the same description and ...

CVE-2000-0962

The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service...

CVE-2000-0962: Undefined Security Weakness

The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service...

Дырка в ppp в FreeBSD (nat deny_incoming)

команда nat denyincoming не работает с нестандартными типами протоколов например IPSec...

DoS против OpenBSD

Пустой пакет протоколов AH и ESP вызывает ошибку в ядре при включенной поддержке IPSec...

Nmap Protocol Scanning DoS against OpenBSD IPSEC

The protocol scanning option -sO in 2.54 Beta releases of nmap results in a remote denial of service against OpenBSD 2.7's IPSEC implementation due to its inability to handle tiny AH/ESP packets. Nmap protocol scans repeatedly cycle through IP protocol version numbers, attempting to elicit ICMP...

CVE-1999-0727

A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted...

CVE-1999-0727

CVE-1999-0727 affects the OpenBSD kernel, where a kernel leak could allow IPsec packets to be sent unencrypted. Documents confirm the root cause is a kernel leak in the OpenBSD kernel, with impact described as partial confidentiality (IPsec traffic could be exposed). The available sources do not ...

CVE-1999-0727: Undefined Security Weakness

A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted...

CVE-1999-0727

A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted...

CVE-2023-24017

...

CVE-2023-24017

This CVE ID is rejected as unused by its Numbering Authority and does not represent an active vulnerability entry.

Microsoft security advisory: Vulnerability in IPsec could allow security feature bypass

None None...