openSUSE Security Update : openswan (openswan-1285)

The previous fix for a flaw in the ASN.1 parser was incomplete and had to be reworked. CVE-2009-2661 This could lead to crashes of the pluto IKE daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...

Gentoo Security Advisory GLSA 200909-05 (openswan)

The remote host is missing updates announced in advisory GLSA 200909-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200909-05 (openswan)

The remote host is missing updates announced in advisory GLSA 200909-05. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

GLSA-200909-05 : Openswan: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200909-05 Openswan: Denial of Service Multiple vulnerabilities have been discovered in Openswan: Gerd v. Egidy reported a NULL pointer dereference in the Dead Peer Detection of the pluto IKE daemon as included in Openswan...

Openswan: Denial of service

Background Openswan is an implementation of IPsec for Linux. Description Multiple vulnerabilities have been discovered in Openswan: Gerd v. Egidy reported a NULL pointer dereference in the Dead Peer Detection of the pluto IKE daemon as included in Openswan CVE-2009-0790. The Orange Labs...

Fedora Core 11 FEDORA-2009-7478 (openswan)

The remote host is missing an update to openswan announced via advisory FEDORA-2009-7478. OpenVAS Vulnerability Test $Id: fcore20097478.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7478 openswan Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-7423 (openswan)

The remote host is missing an update to openswan announced via advisory FEDORA-2009-7423. OpenVAS Vulnerability Test $Id: fcore20097423.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7423 openswan Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-7478 (openswan)

The remote host is missing an update to openswan announced via advisory FEDORA-2009-7478. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-7423 (openswan)

The remote host is missing an update to openswan announced via advisory FEDORA-2009-7423. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

openSUSE Security Update : openswan (openswan-1052)

Two vulnerabilities in the openswan ASN.1 parser when handling RDNs, UTCTIME and GENERALIZEDTIME strings could lead to remote crashes of the pluto daemon CVE-2009-2185. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE Security Update : openswan (openswan-1052)

Two vulnerabilities in the openswan ASN.1 parser when handling RDNs, UTCTIME and GENERALIZEDTIME strings could lead to remote crashes of the pluto daemon CVE-2009-2185. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE Security Update : openswan (openswan-687)

By sending a specially crafted Dead Peer Detection DPD packet remote attackers could crash the pluto IKE daemon CVE-2009-0790. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openswan-687. The...

openSUSE Security Update : openswan (openswan-687)

By sending a specially crafted Dead Peer Detection DPD packet remote attackers could crash the pluto IKE daemon CVE-2009-0790. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openswan-687. The...

Openswan Insecure File Creation

!/bin/bash uglyswan - OpenSwan local root exploit CVE-2008-4190 description: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the 1 ipseclive.conn and 2...

Openswan <= 2.4.12/2.6.16 Insecure Temp File Creation Root Exploit

No description provided by source. !/bin/bash uglyswan - OpenSwan local root exploit CVE-2008-4190 description: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the ...

Openswan <= 2.4.12/2.6.16 Insecure Temp File Creation Root Exploit

Exploit for linux platform in category local exploits ================================================================== Openswan /etc/passwd' /tmp/ipseclive.conn rm /tmp...

Fedora 11 : openswan-2.6.21-5.fc11 (2009-7478)

Fixes Openswan PSK issue with NSS. Fixes CVE-2009-2185 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Openswan 2.4.122.6.16 - Insecure Temp File Creation Privilege Escalation

Openswan 2.4.122.6.16 - Insecure Temp File Creation Privilege Escalation !/bin/bash uglyswan - OpenSwan local root exploit CVE-2008-4190 description: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute...

Openswan 2.4.12/2.6.16 - Insecure Temp File Creation Privilege Escalation

!/bin/bash uglyswan - OpenSwan local root exploit CVE-2008-4190 description: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the 1 ipseclive.conn and 2...

Fedora 10 : openswan-2.6.21-2.fc10 (2009-7423)

Mon Jul 6 2009 Avesh Agarwal - 2.6.21-2 - Openswan ASN.1 parser vulnerability CVE-2009-2185 - Mon Mar 30 2009 Avesh Agarwal - 2.6.21-1 - new upstream release - Fix for CVE-2009-0790 DPD crasher - Fix remaining SADBEXTMAX - KSADBEXTMAX entries - Fix ipsec setup --status not showing amount of...