32 matches found
CVE-2004-0649
CVE-2004-0649 describes a buffer overflow in l2tpd's write_packet function (control.c) that could allow a remote attacker to execute arbitrary code. The vulnerability affects older l2tpd versions, with OpenVAS guidance explicitly noting upgrades to 0.69 or later as the remedy. NVD CVSS suggests a...
CVE-2002-0872
l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions...
CVE-2002-0873
Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via a buffer overflow...
CVE-2002-0873
The CVE-2002-0873 issue affects l2tpd versions around 0.67, where a long attribute/value could overflow and overwrite the vendor field, potentially via a buffer overflow. Additionally, the affected code paths may fail to initialize the random number generator, enabling some predictability in keys...
CVE-2002-0872
CVE-2002-0872 affects l2tpd up to version 0.67 (affected component: RNG initialization). The vulnerability allows remote attackers to hijack sessions due to not initializing the random number generator. Debian advisory DSA-152-1 (DSA-152) confirms fixes: upgrade to 0.67-1.1 (stable) or 0.68-1 (un...
l2tpd Malformed Data Remote DoS
The remote host is running l2tpd, a network tunneling application. The installed version is vulnerable to a denial of service attack. An attacker may use this flaw to disable the VPN and prevent partners / employees from connecting to it. C Tenable Network Security, Inc. Ref:...
l2tpd < 0.68 Multiple Vulnerabilities
The remote host is running a version of l2tpd prior to 0.67. This version is vulnerable to a buffer overflow that could allow an attacker to gain a root shell on this host. In addition, this program does not initialize its random number generator. Therefore, an attacker may predict some key value...
CVE-2002-0872
l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions...
CVE-2002-0873
Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via a buffer overflow...
[SECURITY] [DSA 152-1] New l2tpd packages adds better randomization
-------------------------------------------------------------------------- Debian Security Advisory DSA 152-1 [email protected] http://www.debian.org/security/ Martin Schulze August 13th, 2002 - -------------------------------------------------------------------------- Package : l2tpd...
[SECURITY] [DSA 152-1] New l2tpd packages adds better randomization
-------------------------------------------------------------------------- Debian Security Advisory DSA 152-1 [email protected] http://www.debian.org/security/ Martin Schulze August 13th, 2002 - -------------------------------------------------------------------------- Package : l2tpd...
