Cisco plugs IOS security holes

By Chuck Miller, SC Magazine Security updates for Cisco’s Internetwork Operating System IOS were released Wednesday scmagazine.com to shield against a number of vulnerabilities. The security issues cisco.com are varied and relate to TCP, UDP, mobile and VPN vulnerabilities. In describing one bug,...

Ken "Skywing" Johnson joins Microsoft security team

Microsoft has hired yet another well-known security researcher to join its ever-growing team of exploit and defense experts. This time it’s Ken Johnson, known in the hacker world as Skywing. Johnson is known as an expert on debugging and reverse engineering, and has done a tremendous amount of wo...

[SECURITY] Fedora 10 Update: NetworkManager-openconnect-0.7.0.99-1.fc10

This package contains software for integrating the openconnect VPN software with NetworkManager and the GNOME desktop...

[SECURITY] Fedora 10 Update: NetworkManager-vpnc-0.7.0.99-1.fc10

This package contains software for integrating the vpnc VPN software with NetworkManager and the GNOME desktop...

[SECURITY] Fedora 10 Update: NetworkManager-pptp-0.7.0.99-1.fc10

This package contains software for integrating PPTP VPN support with the NetworkManager and the GNOME desktop...

[SECURITY] Fedora 9 Update: NetworkManager-vpnc-0.7.0.99-1.fc9

This package contains software for integrating the vpnc VPN software with NetworkManager and the GNOME desktop...

[SECURITY] Fedora 9 Update: NetworkManager-pptp-0.7.0.99-1.fc9

This package contains software for integrating PPTP VPN support with the NetworkManager and the GNOME desktop...

[SECURITY] Fedora 9 Update: NetworkManager-openconnect-0.7.0.99-1.fc9

This package contains software for integrating the openconnect VPN software with NetworkManager and the GNOME desktop...

[Full-disclosure] Netgear SSL312 Router - remote DoS

/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2008-02-27 Affected Software: propietary CGI Affected OS : Netgear embedded Linux for...

Netgear SSL312 VPN router DoS

DoS thorugh Web interface...

[Full-disclosure] Netgear SSL312 Router - remote DoS

Attached to this e-Mail is an advisory related to the Netgear SSL312 VPN router propably other devices of Netgear are affected as well but this has not been tested. The advisory can also be found at: http://www.helith.net/txt/netgearssl312remotedos.txt Dear netgear Team: Please consider working...

Netgear embedded Linux for the SSL312 router DOS Vulnerability

Exploit for hardware platform in category dos / poc ============================================================== Netgear embedded Linux for the SSL312 router DOS Vulnerability ============================================================== / / / / / / / / / / / / / // / / / / / / / / / // / / / ...

Nortel Contivity Extranet/VPN Switches Default Password (deprecated)

Binary data 4882.prm...

Hamachi VPN Version Detection

Binary data 4809.prm...

Hamachi VPN Detection

Binary data 4808.prm...

Checkpoint VPN-1 PAT信息泄露漏洞

CVECAN ID: CVE-2008-5849 CheckPoint防火墙/VPN解决方案可为组织提供网络架构和信息安全保护。 对于启用了端口地址翻译（PAT）的CheckPoint VPN-1防火墙，如果远程攻击者向防火墙的18264/tcp端口发送设置有很低TTL值的报文的话，就可以触发ICMPTIMXCEEDINTRANS响应，而响应的封装IP报文中包含有内部IP地址，如下所示： 14:56:25.169480 IP tos 0xe0, ttl 255, id 21407, offset 0, flags none, proto: ICMP 1, length: 68...

Code injection

Check Point VPN-1 R55, R65, and other versions, when Port Address Translation PAT is used, allows remote attackers to discover intranet IP addresses via a packet with a small TTL, which triggers an ICMPTIMXCEEDINTRANS aka ICMP time exceeded in-transit response containing an encapsulated IP packet...

CVE-2008-5849

Check Point VPN-1 R55, R65, and other versions, when Port Address Translation PAT is used, allows remote attackers to discover intranet IP addresses via a packet with a small TTL, which triggers an ICMPTIMXCEEDINTRANS aka ICMP time exceeded in-transit response containing an encapsulated IP packet...

CVE-2008-5849

CVE-2008-5849 affects Check Point VPN-1 with Port Address Translation (PAT) enabled (notably Check Point VPN-1 R55 and R65). The issue is information disclosure: an attacker can remotely send a crafted packet to the firewall management port (18264/tcp) and trigger an ICMP TIMXCEED_INTRANS respons...

CVE-2008-5849

Check Point VPN-1 R55, R65, and other versions, when Port Address Translation PAT is used, allows remote attackers to discover intranet IP addresses via a packet with a small TTL, which triggers an ICMPTIMXCEEDINTRANS aka ICMP time exceeded in-transit response containing an encapsulated IP packet...