Code injection

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denial of service device reload via a crafted L2TP packet...

CVE-2008-3813

Cisco IOS 12.2 and 12.4 are affected by CVE-2008-3813 due to the L2TP management daemon running on the device. When this daemon is enabled (in features like L2VPN, L2TPv3, SGBP, or VPDN), processing a specially crafted L2TP packet can trigger a device reload, resulting in a denial of service. The...

CVE-2008-3813

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denial of service device reload via a crafted L2TP packet...

Cisco IOS第二层隧道协议远程拒绝服务漏洞

BUGTRAQ ID: 31358 CVE ID: CVE-2008-3813 CNCVE ID：CNCVE-20083813 Cisco IOS是一款流行的网络操作系统。 Cisco IOS第二层隧道协议实现存在一个漏洞，远程攻击者可以利用漏洞对设备进行拒绝服务攻击，导致设备重载。 Cisco IOS软件中的L2TP mgmt守护进程启用多个功能，包括Layer 2 virtual private networks L2VPN, Layer 2 Tunnel Protocol Version 3 L2TPv3, Stack Group Bidding Protocol SGBP和Cis...

CVE-2008-3813: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denial of service device reload via a crafted L2TP packet...

Cisco IOS Software Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

FreeBSD Ports: tcpdump

The remote host is missing an update to the system as announced in the referenced advisory. VID 96ba2dae-4ab0-11d8-96f2-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: tcpdump

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : linux, linux-source-2.6.15/20/22 vulnerabilities (USN-625-1)

Dirk Nehring discovered that the IPsec protocol stack did not correctly handle fragmented ESP packets. A remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2007-6282 Johannes Bauer discovered that the 64bit kernel did not correctly handle hrtimer updates. ...

USN-625-1: Linux kernel vulnerabilities

Dirk Nehring discovered that the IPsec protocol stack did not correctly handle fragmented ESP packets. A remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2007-6282 Johannes Bauer discovered that the 64bit kernel did not correctly handle hrtimer updates. ...

Cisco IOS双栈路由器IPv6拒绝服务漏洞

BUGTRAQ ID: 28461 CVECAN ID: CVE-2008-1153 Cisco IOS是思科网络设备中所使用的互联网操作系统。 运行Cisco IOS软件的设备如果启用了IPv6，就会受拒绝服务攻击影响。设备必须还要启用了IPv4 UDP服务才会受这个漏洞影响。如果要利用这个漏洞，攻击IPv6报文必须指向设备，通过路由器路由的报文不会触发这个漏洞。成功利用这个漏洞可能导致以下情况之一： 1. 如果接口上配置了RSVP服务则设备会崩溃。 2. 任何其他受影响的基于IPv4 UDP的服务会导致接口无法接收更多的通讯，仅有利用漏洞端口才会受影响。...

Cisco PIX/ASA设备多个远程拒绝服务及认证绕过漏洞

PIX是一款防火墙设备，可为用户和应用提供策略强化、多载体攻击防护和安全连接服务；自适应安全设备（ASA）是可提供安全和VPN服务的模块化平台。 Cisco PIX/ASA设备中存在多个远程漏洞，远程攻击者可能利用此漏洞导致设备无法正常工作或绕过认证。 具体如下： 绕过LDAP认证 +------------------------- 使用LDAP AAA服务器对终止的L2TP IPSec隧道或远程管理会话进行认证的Cisco ASA 和PIX设备可能受认证绕过攻击的影响，更多信息请见以下公告： 2层隧道协议（L2TP） 必须将终止L2TP...

Authentication flaw

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.2 before 7.228, when using Layer 2 Tunneling Protocol L2TP or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors...

CVE-2007-2462: Undefined Security Weakness

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.2 before 7.228, when using Layer 2 Tunneling Protocol L2TP or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors...

L2TP VPN Server Detection

Binary data 3408.prm...

L2TP VPN Client Detection

Binary data 3407.prm...

CVE-2005-1464

CVE-2005-1464 is listed among multiple vulnerabilities in Ethereal up to version 0.10.11 that allow a remote attacker to cause a denial of service (infinite loop). The connected advisories confirm Ethereal upgrades to version 0.10.11 as a remediation. The exact root cause per-CVE isn’t detailed i...

CVE-2005-1464: Undefined Security Weakness

Multiple unknown vulnerabilities in the 1 KINK, 2 L2TP, 3 MGCP, 4 EIGRP, 5 DLSw, 6 MEGACO, 7 LMP, and 8 RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service infinite loop...

l2tpd: Buffer overflow

Background l2tpd is a GPL implentation of the Layer 2 Tunneling Protocol. Description Thomas Walpuski discovered a buffer overflow that may be exploitable by sending a specially crafted packet. In order to exploit the vulnerable code, an attacker would need to fake the establishment of an L2TP...

FreeBSD : L2TP, ISAKMP, and RADIUS parsing vulnerabilities in tcpdump (192)

The following package needs to be updated: tcpdump %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg96ba2dae4ab011d896f20020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...