qscan NSE Script

Repeatedly probe open and/or closed ports on a host to obtain a series of round-trip time values for each port. These values are used to group collections of ports which are statistically different from other groups. Ports being in different groups or "families" may be due to network mechanisms...

VMware Multiple Products NAT Service Buffer Overflow (CVE-2005-4459)

VMware produces software which emulates PC hardware which is used for virtual computing, storage and networking systems. VMware products provide virtual machines which are containers that simulate working environments. The products are usually used to deliver hosting services as well as testing...

Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass

The FTP proxy used in Apple's Airport Express, Airport Extreme, Time Capsule and possibly elsewhere doesn't check the client provided address and port given by the FTP PORT command against the IP address of the connecting client, or against the use of privileged ports. The FTP PORT command is use...

CVE-2010-0566

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10 allows remote attackers to cause a denial of service device reload via a malformed TCP segment when certain NAT...

Code injection

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10 allows remote attackers to cause a denial of service device reload via a malformed TCP segment when certain NAT...

Code injection

Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.30 through 2.51, when NAT is enabled, allows remote attackers to cause a denial of service system restart via crafted GRE packets...

CVE-2009-4293

CVE-2009-4293 affects SEIL/X1, SEIL/X2, and SEIL/B1 firmware versions 2.30–2.51. The vulnerability lies in NAT processing, where specially crafted GRE packets can cause a remote DoS resulting in a system restart. Exploitation details are not described beyond this, and no in-the-wild exploit infor...

CVE-2009-4293

Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.30 through 2.51, when NAT is enabled, allows remote attackers to cause a denial of service system restart via crafted GRE packets...

SEIL/X Series and SEIL/B1 denial of service vulnerability

Overview SEIL/X Series and SEIL/B1 contain a denial of service DoS vulnerability. SEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contain an issue in the processing by the NAT function, which may lead to a denial of service DoS vulnerability. Impact When processing a specially...

JVN#13011682 SEIL/X Series and SEIL/B1 denial of service vulnerability

SEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contain an issue in the processing by the NAT function, which may lead to a denial of service DoS vulnerability. Impact When processing a specially crafted packet, a remote attacker may cause a denial of service. Solution Update the...

[SECURITY] Fedora 11 Update: libnice-0.0.9-1.fc11

libnice is an implementation of the IETF's draft Interactive Connectivity Establishment standard ICE. ICE is useful for applications that want to establish peer-to-peer UDP data streams. It automates the process of traver sing NATs and provides security against some attacks. Existing standards th...

Ubuntu: Security Advisory (USN-785-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-785-1: ipsec-tools vulnerabilities

It was discovered that ipsec-tools did not properly handle certain fragmented packets. A remote attacker could send specially crafted packets to the server and cause a denial of service. CVE-2009-1574 It was discovered that ipsec-tools did not properly handle memory usage when verifying certifica...

GLSA-200905-03 : IPSec Tools: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200905-03 IPSec Tools: Denial of Service The following vulnerabilities have been found in the racoon daemon as shipped with IPSec Tools: Neil Kettle reported that racoon/isakmpfrag.c is prone to a NULL pointer dereference...

Mandrake Security Advisory MDVSA-2009:114 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory MDVSA-2009:114. OpenVAS Vulnerability Test $Id: mdksa2009114.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:114 ipsec-tools Authors: Thomas Reinke Copyright: Copyright c 2009...

Debian: Security Advisory (DSA-1804-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IPSec Tools: Denial of service

Background The IPSec Tools are a port of KAME's IPsec utilities to the Linux-2.6 IPsec implementation. They include racoon, an Internet Key Exchange daemon for automatically keying IPsec connections. Description The following vulnerabilities have been found in the racoon daemon as shipped with...

Debian DSA-1804-1 : ipsec-tools - NULL pointer dereference, memory leaks

Several remote vulnerabilities have been discovered in racoon, the Internet Key Exchange daemon of ipsec-tools. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1574 Neil Kettle discovered a NULL pointer dereference on crafted fragmented packets that...

[Full-disclosure] [ MDVSA-2009:114 ] ipsec-tools

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:114 http://www.mandriva.com/security/ Package : ipsec-tools Date : May 18, 2009 Affected: Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Multiple memory leaks in Ipsec-tools before 0.7.2 allo...

ipsec-tools: multiple memory leaks fixed in 0.7.2

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...