CVE-2004-1457

The CVE-2004-1457 description indicates a vulnerability in the VPN capability of Novell Bordermanager 3.8, where remote attackers can cause a denial-of-service (ABEND in IKE.NLM) by sending a malformed IKE packet, as tested by the Striker ISAKMP Protocol Test Suite. The available sources specify ...

CVE-2004-1483

The CVE covers multiple unknown vulnerabilities in the ActiveX and HTML file browsers of Symantec Clientless VPN Gateway 4400 Series 5.0. The description indicates unknown attack vectors and unknown impact; no details on root cause, affected versions beyond 5.0, exploits, or remediation are provi...

CVE-2005-0346

The CVE-2005-0346 entry concerns SafeNet SoftRemote VPN Client, where the VPN pre-shared key/password is stored in cleartext in memory within the IreIKE.exe process. This creates a local-access data exposure: any user with access to the IreIKE.exe process can read the password. The vulnerability ...

CVE-2005-0346

SafeNet SoftRemote VPN Client stores the VPN password pre-shared key in cleartext in memory of the IreIKE.exe process, which allows local users to gain sensitive information if they have access to that process...

[Full-Disclosure] SafeNet SoftRemote VPN Client Issue: Clear-text password stored in memory

SafeNet SoftRemote VPN Client Issue: Clear-text password stored in memory Summary: NTA Monitor have discovered a password disclosure issue in the SafeNet SoftRemote VPN client: The SoftRemote client stores the password in an obfuscated form in the Windows registry, but it also stores the...

CVE-2004-1105

Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information...

CVE-2004-2621

Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does not check the gateway certificate until after a dialog box has been displayed to the user, which creates a race condition that allows remote attackers to perform a man-in-the-middle MITM attack...

CVE-2004-1483

Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact...

CVE-2004-1457

The Virtual Private Network VPN capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service ABEND in IKE.NLM via a malformed IKE packet, as sent by the Striker ISAKMP Protocol Test Suite...

CVE-2004-1105

The CVE-2004-1105 entry concerns Nortel Networks Contivity VPN Client, where the authentication error message varies depending on whether the username is valid, leading to partial information disclosure over a network. The NVD entry documents a Network-level vulnerability with a base score of 5.0...

CVE-2004-1105

Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information...

Nortel Contivity VPN information leak

Messages for wrong username and wrong password are different...

Nortel Networks Contivity VPN Client information leakage vulnerability

Name: User Account Enumeration in Nortel Contivity VPN Vendor: Nortel Networks Products Affected: Nortel Networks Contivity VPN Client Type: Remote User Account Enumeration Severity: Medium I. Overview The Nortel Networks Contivity VPN Client authentication error message provides more information...

Nortel Networks Contivity VPN Client information leakage vulnerability

Overview The Nortel Networks Contivity VPN Client authentication error message provide additional information that may be useful to an attacker. Description The Nortel Networks Contivity VPN Client software provides an encrypted and authenticated VPN connection from a client system to a Nortel...

Presentation: Bypassing client application protection techniques with notepad

Topic: Bypassing client application protection techniques Category: Protection bypass Affected products: CheckPoint VPN-1TM & FireWall-1R NG with Application Intelligence R55 HFA 9 Microsoft Windows XP SP2 Agnitum Outpost Pro 2.1, 2.5 Tiny Firewall Pro v6.0.100 ZoneAlarm Pro with Web Filtering...

The ActiveX and HTML file browsers of the Symantec 4400 Series Clientless VPN Gateway contains various unspecified vulnerabilities

Overview The ActiveX and HTML file browsers in the Symantec Clientless VPN Gateway 4400 Series contain various unspecified vulnerabilities. Description The Symantec Clientless VPN Gateway 4400 Series is a stand-alone security appliance for connecting remote users to a trusted network via a virtua...

Debian DSA-104-1 : cipe - DoS attack

Larry McVoy found a bug in the packet handling code for the CIPE VPN package: it did not check if a received packet was too short and could crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Adviso...

CVE-2004-0699

Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data...

Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Security Advisory SYM04-013 22 September, 2004 Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues Revision History None Risk Impact High Overview Symantec resolved three high-risk vulnerabilities that...

CVE-2004-0699

CVE-2004-0699 describes a heap-based buffer overflow in the ASN.1 decoding library used by Check Point VPN-1 products when Aggressive Mode IKE is enabled. The root cause is a vulnerability in ASN.1 decoding that can be triggered by sending a malformed IKE packet after initiating a negotiation, al...