12 matches found
EUVD-2002-0864
Malware in sbrugna...
EUVD-2002-0865
Malware in sbrugna...
EUVD-2004-0648
Malware in sbrugna...
Debian DSA-152-1 : l2tpd - missing random seed
Current versions of l2tpd, a layer 2 tunneling client/server program, forgot to initialize the random generator which made it vulnerable since all generated random number were 100% guessable. When dealing with the size of the value in an attribute value pair, too many bytes were able to be copied...
GLSA-200407-17 : l2tpd: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200407-17 l2tpd: Buffer overflow Thomas Walpuski discovered a buffer overflow that may be exploitable by sending a specially crafted packet. In order to exploit the vulnerable code, an attacker would need to fake the establishment...
l2tpd < 0.69 control.c write_packet Function Remote Overflow
The remote host is running a version of l2tpd which is older or equal to 0.68. This version is vulnerable to a buffer overflow which might allow an attacker to execute arbitrary commands on the remote host with super-user privileges. C Tenable Network Security, Inc. include"compat.inc"; if...
L2TPd buffer overflow
No description provided...
CVE-2004-0649
Buffer overflow in writepacket in control.c for l2tpd may allow remote attackers to execute arbitrary code...
CVE-2002-0873
Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via a buffer overflow...
l2tpd Malformed Data Remote DoS
The remote host is running l2tpd, a network tunneling application. The installed version is vulnerable to a denial of service attack. An attacker may use this flaw to disable the VPN and prevent partners / employees from connecting to it. C Tenable Network Security, Inc. Ref:...
CVE-2002-0873
Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via a buffer overflow...
DSA-152 l2tpd - missing random seed
Bulletin has no description...