Ubuntu: Security Advisory (USN-785-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-785-1: ipsec-tools vulnerabilities

It was discovered that ipsec-tools did not properly handle certain fragmented packets. A remote attacker could send specially crafted packets to the server and cause a denial of service. CVE-2009-1574 It was discovered that ipsec-tools did not properly handle memory usage when verifying certifica...

GLSA-200905-03 : IPSec Tools: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200905-03 IPSec Tools: Denial of Service The following vulnerabilities have been found in the racoon daemon as shipped with IPSec Tools: Neil Kettle reported that racoon/isakmpfrag.c is prone to a NULL pointer dereference...

Mandrake Security Advisory MDVSA-2009:114 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory MDVSA-2009:114. OpenVAS Vulnerability Test $Id: mdksa2009114.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:114 ipsec-tools Authors: Thomas Reinke Copyright: Copyright c 2009...

Debian: Security Advisory (DSA-1804-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IPSec Tools: Denial of service

Background The IPSec Tools are a port of KAME's IPsec utilities to the Linux-2.6 IPsec implementation. They include racoon, an Internet Key Exchange daemon for automatically keying IPsec connections. Description The following vulnerabilities have been found in the racoon daemon as shipped with...

Debian DSA-1804-1 : ipsec-tools - NULL pointer dereference, memory leaks

Several remote vulnerabilities have been discovered in racoon, the Internet Key Exchange daemon of ipsec-tools. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1574 Neil Kettle discovered a NULL pointer dereference on crafted fragmented packets that...

[Full-disclosure] [ MDVSA-2009:114 ] ipsec-tools

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:114 http://www.mandriva.com/security/ Package : ipsec-tools Date : May 18, 2009 Affected: Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Multiple memory leaks in Ipsec-tools before 0.7.2 allo...

ipsec-tools: multiple memory leaks fixed in 0.7.2

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

IPSec-Tools Memory Leakage Vulnerability

This host is installed with IPSec-Tools for Linux and is prone to Memory Leakage Vulnerability. OpenVAS Vulnerability Test $Id: secpodipsec-toolsmemoryleakagevuln.nasl 5055 2017-01-20 14:08:39Z teissa $ IPSec-Tools Memory Leakage Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009...

Design/Logic Flaw

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

CVE-2009-1632

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

CVE-2009-1632

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

CVE-2009-1632

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

CVE-2009-1632

Removed by vendor...

CVE-2009-1632

CVE-2009-1632 affects ipsec-tools up to version 0.7.1 (before 0.7.2). The vulnerability involves multiple memory leaks in the racoon daemon, caused by issues in (1) signature verification during X.509 authentication (eay_check_x509sign in src/racoon/crypto_openssl.c) and (2) NAT-Traversal keepali...

Solaris 5.4 (sparc) : 105237-09

SunScreen EFS 1.1: miscellaneous fixes including NAT. Date this patch was last updated by Sun : Sep/09/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc...

Input validation

Multiple unspecified vulnerabilities in the home agent HA implementation in the 1 Mobile IP NAT Traversal feature and 2 Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service input queue wedge and interface outage via an ICMP packet, aka Bug ID...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the 1 Mobile IP NAT Traversal feature and 2 Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service input queue wedge and interface outage via MIPv6 packets, aka Bug ID CSCsm97220...

CVE-2009-0634

Multiple unspecified vulnerabilities in the home agent HA implementation in the 1 Mobile IP NAT Traversal feature and 2 Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service input queue wedge and interface outage via an ICMP packet, aka Bug ID...