📄 Check Point VPN IKE Logic Flaw

This is a Python script attempting to exploit a vulnerability in Check Point VPN by sending a malformed IKESAINIT packet to UDP port 500, detecting whether the target responds as an indicator of exploitability, then executing a MITM attack to intercept IKE packets between a victim and a VPN...

EUVD-2011-3230

Malware in sbrugna...

EUVD-2017-17129

Malware in sbrugna...

EUVD-2004-1453

Malware in sbrugna...

EUVD-2010-0598

Malware in sbrugna...

CVE-2017-8167

Huawei firewall products USG9500 V500R001C50 has a DoS vulnerability.A remote attacker who controls the peer device could exploit the vulnerability by sending malformed IKE packets to the target device. Successful exploit of the vulnerability could cause the device to restart...

CVE-2017-8167

Huawei firewall products USG9500 V500R001C50 has a DoS vulnerability.A remote attacker who controls the peer device could exploit the vulnerability by sending malformed IKE packets to the target device. Successful exploit of the vulnerability could cause the device to restart...

Huawei USG9500 Denial of Service Vulnerability

Huawei USG9500 is a firewall product from Huawei China. A denial of service vulnerability exists in the Huawei USG9500 V500R001C50 version, which arises from the program failing to adequately perform input validation. A remote attacker can exploit this vulnerability by sending malformed IKE packe...

PT-2017-18173

Name of the Vulnerable Software and Affected Versions Huawei firewall products USG9500 version V500R001C50 Description The issue is related to a DoS vulnerability that can be exploited by a remote attacker who controls the peer device. The attacker can send malformed IKE packets to the target...

Cisco ASR 5000 Software ipsecmgr Process IKE Packet Parsing Denial of Service Vulnerability

A vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an unauthenticated, remote attacker to cause the ipsecmgr process to reload. The vulnerability is due to a logical error while parsing IKE packets. An attacker could exploit this vulnerability by submitting malformed I...

CVE-2011-3266: Undefined Security Weakness

The prototreeadditem function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service infinite loop via vectors involving a malformed IKE packet and many items in a tree...

PT-2011-4356

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.0 through 1.4.8 Wireshark versions 1.6.0 through 1.6.1 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, when the IKEv1 protocol dissector is used in Wireshark. Th...

Wireshark 1.6.1 Malformed IKE Packet Denial of Service

Wireshark 1.6.1 Malformed IKE Packet Denial of Service ------------------------------------------------------------------ I. Summary A flaw has been identified in Wireshark 1.6.1 concerning IKEv1 protocol dissector and the function prototreeadditem ,when add more than 1000000 items to a...

CVE-2010-0567

CVE-2010-0567 affects Cisco ASA 5500 Series and Cisco PIX 500 Series. A vulnerability in processing malformed IKE messages through an existing IPsec tunnel to UDP port 4500 can cause denial of service by tearing down all IPsec tunnels terminating on the device and prevent new tunnels from being e...

CVE-2010-0567

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.1, 8.1 before 8.12.37, and 8.2 before 8.21.15; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service active IPsec tunn...

CVE-2005-3669: Undefined Security Weakness

Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 IKEv1 implementation in multiple Cisco products allow remote attackers to cause a denial of service device reset via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to t...

Novell Bordermanager VPN Service denial-of-service vulnerability

Overview A vulnerability exists in the Novell Bordermanager VPN service that could allow a remote attacker to cause a denial of service. Description The Novell Bordermanager product includes Virtual Private Network VPN capabilities, including support for the standard Internet Key Exchange IKE...

Cisco Security Advisory: Cisco IPSec VPN Services Module Malformed IKE Packet Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IPSec VPN Services Module Malformed IKE Packet Vulnerability Revision 1.0 For Public Release 2004 April 8 at 1600 UTC GMT ---------------------------------------------------------------------- Contents Summary Affected...

Cisco IPSec Malformed IKE Packet Vulnerability

...

Cisco IPSec VPNSM IKE Packet DoS (CSCed30113)

The remote router contains a version of IOS which has multiple flaws when dealing with malformed IKE packets. CISCO identifies this vulnerability as bug id CSCed30113 An attacker may use this flaw to render this router inoperable C Tenable Network Security include"compat.inc"; ifdescription...