8674 matches found
Cisco Security Advisory: Vulnerabilities in the Internet Key Exchange Xauth Implementation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== Vulnerabilities in the Internet Key Exchange Xauth Implementation ================================================================= Revision 1.0 For Public Release 2005 April 6 1600 UTC -...
CVE-2005-0943
Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service device reload or drop user connection via a crafted HTTPS packet...
CVE-2005-0943
CVE-2005-0943 affects Cisco VPN 3000 Series Concentrator running firmware 4.1.7.A and earlier. The vulnerability allows remote attackers to cause a denial of service (device reload or user connection drop) by sending a crafted HTTPS packet. Attack vector is network, with low complexity and no aut...
Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================= Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL attack ================================================================= Revision 1.0 For Public Release...
CVE-2005-0943
Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service device reload or drop user connection via a crafted HTTPS packet...
ipsec-tools KAME racoon Daemon ISAKMP Header Parsing Remote DoS
The remote IPSEC server seems to have a problem negotiating malformed ISAKMP packets. An attacker may use this flaw to crash the remote host repeatedly and disable your VPN remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17655; scriptversion"1.21";...
CVE-2001-1431
CVE-2001-1431 affects Nokia Firewall Appliances (IPSO 3.3/3.4 and VPN-1/Firewall-1 4.1 SP3/4/5) when SYN Defender is in Active Gateway mode. The third packet of the TCP three-way handshake is not rewritten to use the NAT IP address, allowing remote attackers to gain sensitive information. Exploit...
CVE-2005-0844
CVE-2005-0844 affects Nortel VPN client 5.01, where the cleartext password is stored in the memory of the Extranet.exe process, allowing a local user to access sensitive information. The root cause is insecure in‑memory handling of credentials in Extranet.exe, with a local attack vector and parti...
CVE-2005-0844
Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sensitive information...
CVE-2001-1431
Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or IPSO 3.4.1 and VPN-1/FireWall-1 4.1 Service Pack 5, when SYN Defender is configured in Active Gateway mode, does not properly rewrite the third...
Nortel VPN Client Issue: Clear-text password stored in memory
Nortel VPN Client Issue: Clear-text password stored in memory Summary: NTA Monitor have discovered a password disclosure issue in the Nortel Windows VPN client: The Nortel client stores the password in an obfuscated form in the Windows registry, but it also stores the unencrypted password in...
Nortel VPN client weak encryption
Cleartext password is stored in memory...
Aventail ASAP Platform Management Console Detection
The remote host seems to be an Aventail SSL VPN appliance, and it allows connections to its web console management. Letting attackers know that you are using such a device will help them to focus their attacks or will make them change their strategy. In addition to this, an attacker may attempt a...
CVE-2005-0618
The issue is a load-balancing defect in SMTP binding on several Symantec/Nexland devices that can cause outbound SMTP traffic intended for a trusted network to be sent over an untrusted path when two WANs are used. Affected products and firmware: Symantec Firewall/VPN Appliance 200/200R (before 1...
Check Point VPN-1 SecureClient - IP Address Local Memory Access
Check Point VPN-1 SecureClient - IP Address Local Memory Access source: https://www.securityfocus.com/bid/12571/info VPN-1 SecureClient is reported prone to a vulnerability that may allow local attackers to disclose sensitive memory. This can lead to various other attacks against a vulnerable...
Check Point VPN-1 SecureClient - IP Address Local Memory Access
source: https://www.securityfocus.com/bid/12571/info VPN-1 SecureClient is reported prone to a vulnerability that may allow local attackers to disclose sensitive memory. This can lead to various other attacks against a vulnerable computer. The vulnerability exists in the 'SRService.exe', which...
CVE-2004-1472
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R with firmware older than 1.63 are vulnerable to a remote denial of service (device freeze) via a fast UDP port scan on the WAN interface. The available sources confirm the affected models and firmware range but do not provide addition...
CVE-2004-1473
CVE-2004-1473 affects Symantec Enterprise Firewall/VPN Appliances (models 100, 200, 200R) and Gateway Security devices (320, 360, 360R) with firmware versions before 1.63 (or 622 respectively). The issue allows remote attackers to bypass filtering and determine if services such as tftpd, snmpd, o...
CVE-2004-1474
This CVE pertains to Symantec Enterprise Firewall/VPN Appliances (models 100, 200, 200R) with firmware before 1.63 and Gateway Security appliances (320, 360, 360R) with firmware before 622. The underlying issue is a default read/write SNMP community string, which lets an unauthenticated remote at...