958 matches found
Cisco VPN Concentrator IKE resource exhaustion DoS Advisory
Cisco VPN Concentrator IKE resource exhaustion DoS Advisory 1. Overview NTA Monitor discovered a denial of service vulnerability in the Cisco VPN 3000 series concentrator products while performing a VPN security test for a customer in July 2005. The vulnerability affects Phase-1 of the IKE...
PT-2006-4752 · Cisco · Cisco Ios +3
Name of the Vulnerable Software and Affected Versions: Cisco IOS versions affected versions not specified VPN 3000 Concentrators versions affected versions not specified PIX firewalls versions affected versions not specified Description: The issue concerns the Internet Key Exchange IKE version 1...
[SA17553] Cisco ISAKMP IKE Message Processing Denial of Service
TITLE: Cisco ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17553 VERIFY ADVISORY: http://secunia.com/advisories/17553/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Cisco SAN-OS 1.x MDS 9000 Switches http://secunia.com/product/3214/ Cisco...
CVE-2005-1058
Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2 negotiations...
CVE-2005-1058
Cisco IOS 12.2T, 12.3 and 12.3T contain an ISAKMP/XAUTH processing flaw: if XAUTH attributes in the ISAKMP profile are not fully processed after Phase 1, a remote attacker can bypass XAUTH and proceed to Phase 2 negotiations, potentially gaining access to private resources. Affected functionality...
CVE-2005-1020
Secure Shell SSH 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service device reload 1 via a username that contains a domain name when using a TACACS+ server to authenticate, 2 when a new SSH session is in the login phase and a currently logged in user issues a sen...
Trojan/Backdoor - Phase Zero Detection
Binary data 1916.prm...
FreeBSD : racoon fails to verify signature during Phase 1 (163)
The following package needs to be updated: racoon %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgd8769838881411d890d10020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
CVE-2004-0155
CVE-2004-0155 affects the KAME IKE daemon racoon (IPsec-tools). During Phase 1 RSA-signature authentication, racoon validates the X.509 certificate but does not verify the RSA signature, enabling a remote attacker who presents a valid, trusted X.509 cert to perform man-in-the-middle attacks or es...
KAME Racoon IKE daemon fails to properly verify client RSA signatures
Overview The KAME Racoon IKE daemon fails to properly verify client RSA signatures when using Main or Aggressive Mode during a Phase 1 IKE exchange. Description Racoon is an IKE Key Management daemon that negotiates and configures a set of parameters for IPSec. When authenticating a peer in Phase...
racoon fails to verify signature during Phase 1
Ralf Spenneberg discovered a serious flaw in racoon. When using Phase 1 main or aggressive mode, racoon does not verify the client's RSA signature. Any installations using X.509 authentication are strongly urged to upgrade. Installations using pre-shared keys are believed to be unaffected...
CVE-2003-1004
Cisco PIX firewall 6.2.x through 6.2.3, when configured as a VPN Client, allows remote attackers to cause a denial of service dropped IPSec tunnel connection via an IKE Phase I negotiation request to the outside interface of the firewall...
Cisco PIX multiple bugs
SNMPv3 message causes device to reboot. If device is configured as VPN client and another VPN client connects IPSec tunnel may be broken during IKE phase...
CVE-2003-0591
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is a duplicate number that was created during the refinement phase. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
H-Sphere WebShell 2.4 - Remote Command Execution
/ source: https://www.securityfocus.com/bid/6527/info A vulnerability has been discovered in H-Sphere Webshell. During the pre-authentication phase Webshell fails to perform sufficient bounds checking on user-supplied HTTP parameters. As a result, a malicious attacker may be able to trigger a...
CVE-2000-0288
Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable...
