CVE-2006-3906

CVE-2006-3906 describes a DoS in the IKEv1 implementation on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls. The root cause is improper handling of large volumes of IKE Phase-1 requests, leading to resource exhaustion and degraded availability. Exploitation is possible without valid credent...

Cisco VPN Concentrator IKE resource exhaustion DoS Advisory

Cisco VPN Concentrator IKE resource exhaustion DoS Advisory 1. Overview NTA Monitor discovered a denial of service vulnerability in the Cisco VPN 3000 series concentrator products while performing a VPN security test for a customer in July 2005. The vulnerability affects Phase-1 of the IKE...

RE: [Full-disclosure] Cisco VPN Concentrator IKE resource exhaustionDoS Advisory

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello: This is a Cisco PSIRT response to an advisory published by an unaffiliated third party, Roy Hills, of NTA Monitor Ltd posted as of July 26, 2006 at http://www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html, and entitled: Cisco VPN...

Cisco VPN Concentrator DoS

IKE requests flood leads to resource exhaustion...

Internet Key Exchange Protocol Version 1 Denial of Service Vulnerability

Multiple products contain a vulnerability in the implementation of the Internet Key Exchange IKE version 1 protocol. IKE is typically used for key exchange in IPSec, and IPSec is commonly used to encrypt data for VPN connections. The vulnerability affects IKE Phase 1 negotiations in both Main Mod...

CVE-2006-3551

NCP Secure Enterprise Client aka VPN/PKI client 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and...

CVE-2006-3551

CVE-2006-3551 affects NCP Secure Enterprise Client (VPN/PKI client) 8.30 Build 59 and possibly earlier. When both the Link Firewall and Personal Firewall are configured to block all inbound and outbound traffic, the client could be leveraged to send inbound UDP traffic from source port 67 to dest...

Windows RRAS memory corruption vulnerability

Added: 06/30/2006 CVE: CVE-2006-2370 BID: 18325 OSVDB: 26437 Background The Routing and Remote Access Service RRAS allows a Windows computer to act as a router, dial-up access server, VPN server, or network address translator. Problem A buffer overflow in RRAS allows remote attackers to execute...

CVE-2006-3252

Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary code via a long GET request...

CVE-2006-3252

CVE-2006-3252 describes a buffer overflow in the PrivateWire Online Registration Facility (ADMCREG.EXE) used by PrivateWire VPN software up to version 3.7. The vulnerability allows remote attackers to execute arbitrary code via a long GET request. Public references show exploitation tooling in Me...

CVE-2006-3252

Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary code via a long GET request...

CVE-2006-3073

Multiple cross-site scripting XSS vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances ASA, when in WebVPN clientless mode, allow remote attackers to inject arbitrary web script or HTML via the domain parameter in ...

CVE-2006-3073

CVE-2006-3073 describes multiple XSS vulnerabilities in Cisco WebVPN for VPN 3000 Series Concentrators and ASA 5500 Series in WebVPN clientless mode. The flaw allows remote attackers to inject arbitrary web script or HTML via the domain parameter in dnserror.html and connecterror.html (bug IDs CS...

Microsoft Routing and Remote Access does not properly handle RPC requests

Overview There is a vulnerability in the Microsoft Windows Routing and Remote Access Service that could allow an attacker to take control of the affected system. Description The Routing and Remote Access Service RRAS allows computers running the Windows 2000, XP, and Server 2003 operating systems...

CVE-2006-2679

Unspecified vulnerability in the VPN Client for Windows Graphical User Interface GUI aka the VPN client dialer in Cisco VPN Client for Windows 4.8.00. and earlier, except for 4.7.00.0533, allows local authenticated, interactive users to gain privileges, possibly due to privileges of dialog boxes,...

Code injection

Unspecified vulnerability in the VPN Client for Windows Graphical User Interface GUI aka the VPN client dialer in Cisco VPN Client for Windows 4.8.00. and earlier, except for 4.7.00.0533, allows local authenticated, interactive users to gain privileges, possibly due to privileges of dialog boxes,...

CVE-2006-2679

Unspecified vulnerability in the VPN Client for Windows Graphical User Interface GUI aka the VPN client dialer in Cisco VPN Client for Windows 4.8.00. and earlier, except for 4.7.00.0533, allows local authenticated, interactive users to gain privileges, possibly due to privileges of dialog boxes,...

CVE-2006-2679

Cisco VPN Client for Windows (GUI) on Windows, versions 4.8.00.* and earlier (except 4.7.00.0533), contains a local privilege escalation vulnerability tied to the dialog box privileges. The issue allows a local authenticated, interactive user to gain elevated privileges, potentially SYSTEM, via t...

Cisco Security Advisory: Windows VPN Client Local Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Windows VPN Client Local Privilege Escalation Vulnerability Document ID: 70332 Advisory ID: cisco-sa-20060524-vpnclient http://www.cisco.com/warp/public/707/cisco-sa-20060524-vpnclient.shtml Revision 1.0 For Public Release 200...

Windows VPN Client Local Privilege Escalation Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...