500 matches found
CVE-2010-3308
Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long ciscobanner aka serverbanner field...
CVE-2010-3752
programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in 1 ciscodnsinfo or 2 ciscodomaininfo data in a packet, a different vulnerability than CVE-2010-3302...
PT-2010-1065 · Openswan +1 · Openswan-Debuginfo +3
Name of the Vulnerable Software and Affected Versions: openswan versions 2.6.24 through 2.6.28 openswan-debuginfo versions 2.6.24 openswan-doc versions 2.6.24 Description: The issue affects the confidentiality, integrity, and availability of protected information. Exploitation can be carried out...
PT-2010-1066 · Red Hat · Openswan +1
Name of the Vulnerable Software and Affected Versions: Openswan versions 2.6.24 through 2.6.28 Description: The issue is related to a buffer overflow in the client, specifically in programs/pluto/xauth.c, which might allow remote authenticated gateways to execute arbitrary code or cause a denial ...
CVE-2010-3752: Improper Neutralization of Special Elements used in an OS Command
programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in 1 ciscodnsinfo or 2 ciscodomaininfo data in a packet, a different vulnerability than CVE-2010-3302...
CVE-2010-3302: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long 1 ciscodnsinfo or 2 ciscodomaininfo data in a packet...
CVE-2010-3753: Improper Neutralization of Special Elements used in an OS Command
programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in the ciscobanner aka serverbanner field, a different vulnerability than CVE-2010-3308...
CVE-2010-3308: Improper Control of Generation of Code
Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long ciscobanner aka serverbanner field...
PT-2010-1067
Name of the Vulnerable Software and Affected Versions Openswan versions 2.6.24 through 2.6.28 Description The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely by an authenticated attacker. Specifically, in Openswan 2.6.25 throug...
PT-2010-1068
Name of the Vulnerable Software and Affected Versions Openswan versions 2.6.24 through 2.6.28 Openswan-debuginfo versions 2.6.24 Openswan-doc versions 2.6.24 Description The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely by an...
Cisco WRV210 null pointer dereference
Exploit for windows platform in category dos / poc ===================================== Cisco WRV210 null pointer dereference ===================================== / 2010-09-24 by Paolo j5r9pn3lka yahoo dot com Product: Cisco WRV210 Wireless-G VPN Router - RangeBooster Type: denial of service...
Debian DSA-1898-1 : openswan - denial of service
It was discovered that the pluto daemon in openswan, an implementation of IPSEC and IKE, could crash when processing a crafted X.509 certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...
CentOS 5 : kernel (CESA-2009:0473)
Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
CentOS 5 : openswan (CESA-2009:1138)
Updated openswan packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Ke...
SLES10: Security update for openswan
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openswan More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009...
SLES10: Security update for openswan
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openswan More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009...
SLES10: Security update for openswan
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openswan More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009...
SLES10: Security update for openswan
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openswan More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...
SLES10: Security update for openswan
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openswan More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...
SLES10: Security update for openswan
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openswan More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...