279 matches found
CVE-2004-0403
Racoon before 20040408a allows remote attackers to cause a denial of service memory consumption via an ISAKMP packet with a large length field...
security flaw
Racoon before 20040408a allows remote attackers to cause a denial of service memory consumption via an ISAKMP packet with a large length field...
CVE-2004-0392
racoon before 20040407b allows remote attackers to cause a denial of service infinite loop and dropped connections via an IKE message with a malformed Generic Payload Header containing invalid 1 "Security Association Next Payload" and 2 "RESERVED" fields...
CVE-2004-0392
CVE-2004-0392 affects the racoon IKE daemon. The vulnerability is in racoon before 20040407b, where handling of an IKE message with a malformed Generic Payload Header (invalid Security Association Next Payload and RESERVED fields) can cause a remote denial of service via an infinite loop and drop...
CVE-2004-0155
CVE-2004-0155 affects the KAME IKE daemon racoon (IPsec-tools). During Phase 1 RSA-signature authentication, racoon validates the X.509 certificate but does not verify the RSA signature, enabling a remote attacker who presents a valid, trusted X.509 cert to perform man-in-the-middle attacks or es...
CVE-2004-0403
Removed by vendor...
CVE-2004-0403
The CVE-2004-0403 issue affects ipsec-tools’ racoon ISAKMP daemon. A remote attacker can overwhelm memory by sending an ISAKMP packet with a large length field, leading to denial of service. Affected product: racoon (part of ipsec-tools) prior to 20040408a. Root cause: ISAKMP header length field ...
CVE-2004-0403
Racoon before 20040408a allows remote attackers to cause a denial of service memory consumption via an ISAKMP packet with a large length field...
KAME Racoon IKE daemon fails to properly verify client RSA signatures
Overview The KAME Racoon IKE daemon fails to properly verify client RSA signatures when using Main or Aggressive Mode during a Phase 1 IKE exchange. Description Racoon is an IKE Key Management daemon that negotiates and configures a set of parameters for IPSec. When authenticating a peer in Phase...
ipsec-tools contains an X.509 certificates vulnerability.
Background From http://ipsec-tools.sourceforge.net/ : "IPsec-Tools is a port of KAME's IPsec utilities to the Linux-2.6 IPsec implementation." Description racoon a utility in the ipsec-tools package does not verify digital signatures on Phase1 packets. This means that anybody holding the correct...
racoon fails to verify signature during Phase 1
Ralf Spenneberg discovered a serious flaw in racoon. When using Phase 1 main or aggressive mode, racoon does not verify the client's RSA signature. Any installations using X.509 authentication are strongly urged to upgrade. Installations using pre-shared keys are believed to be unaffected...
racoon remote denial of service vulnerability (ISAKMP header length field)
When racoon receives an ISAKMP header, it will attempt to allocate sufficient memory for the entire ISAKMP message according to the header's length field. If an attacker crafts an ISAKMP header with a ridiculously large value in the length field, racoon may exceed operating system resource limits...
Kame Racoon Invalid Cookie Handling Remote DoS
The remote system appears to have a problem with processing requests with invalid cookie values. At least one VPN product racoon demonstrates this flaw. Racoon is integrated with: FreeBSD 4.0 and beyond OpenBSD 2.7 and beyond NetBSD 1.5 and beyond BSD/OS 4.2 and beyond However, the bug has only...
CVE-2004-0164
CVE-2004-0164 affects the KAME racoon IKE daemon (and related ipsec-tools deployments on BSDs) where crafted ISAKMP messages (notably a delete message or INITIAL-CONTACT) can cause deletion of ISAKMP SAs or certificates. The connected advisories describe that vulnerable releases include certain v...
KAME Racoon - 'Initial Contact' SA Deletion
// source: https://www.securityfocus.com/bid/9417/info It has been reported that it may be possible for attackers to remotely delete security associations SAs in hosts running the KAME IKE daemon Racoon. / Sun Microsystems Solaris sysinfo Kernel Memory Disclosure exploit...
KAME Racoon - Initial Contact SA Deletion
KAME Racoon - Initial Contact SA Deletion // source: https://www.securityfocus.com/bid/9417/info It has been reported that it may be possible for attackers to remotely delete security associations SAs in hosts running the KAME IKE daemon Racoon. / Sun Microsystems Solaris sysinfo Kernel Memory...
unauthorized deletion of IPsec (and ISAKMP) SAs in racoon
0 Preface Now that most bugs in isakmpd that allowed for unauthorized SA deletion are "fixed", it's time to release some information on racoon. By the way: About 5 months ago I tried to contact the KAME developers. 1 Description racoon, KAME's IKE daemon, contains some flaws, that allow for...
racoon security association deletion vulnerability
A remote attacker may use specially crafted IKE/ISAKMP messages to cause racoon to delete security associations. This could result in denial-of-service or possibly cause sensitive traffic to be transmitted in plaintext, depending upon configuration...
racoon remote denial of service vulnerability (IKE Generic Payload Header)
When racoon receives an IKE message with an incorrectly constructed Generic Payload Header, it may behave erratically, going into a tight loop and dropping connections...