CVE-2002-1098

CVE-2002-1098 affects Cisco VPN 3000 Concentrator 2.2.x and 3.x prior to 3.5.3. When the XML filter configuration is enabled, the device’s HTTPS on Public Inbound (XML-Auto)(forward/in) rule sets the protocol to ANY, allowing arbitrary traffic to pass through the concentrator. The available docum...

CVE-2002-1098

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound XML-Autoforward/in" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator...

CVE-2002-1106

Cisco VPN Client software 2.x.x and 3.x prior to 3.5.1C is vulnerable because it does not properly verify that certificate DN fields match the VPN Concentrator certificate, enabling potential remote man-in-the-middle attacks. This is the explicit vulnerability described in CVE-2002-1106. The prov...

CVE-2002-1092

CVE-2002-1092 affects Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, where using internal authentication with group accounts and no user accounts allows remote VPN clients to log in via PPTP or IPSEC user authentication. Root cause identified in multiple advisories for the Cisco VPN...

Cisco Security Advisory: Vulnerabilities in Kerberos 5 Implementation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in Kerberos 5 Implementation Revision 1.0 For Public Release 2004 August 31 1830 UTC GMT - ---------------------------------------------------------------------- Contents ======== Summary Affected Products...

GLSA-200404-05 : ipsec-tools contains an X.509 certificates vulnerability.

The remote host is affected by the vulnerability described in GLSA-200404-05 ipsec-tools contains an X.509 certificates vulnerability. racoon a utility in the ipsec-tools package does not verify digital signatures on Phase1 packets. This means that anybody holding the correct X.509 certificate...

ISS Protection Brief: Entrust Libkmp Library Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Brief August 26, 2004 Entrust LibKmp Library Buffer Overflow Summary: ISS X-Force has discovered a flaw in the Entrust LibKmp ISAKMP library. This library is used by multiple VPN vendors to facilitate IKE key exchange for...

Novell Bordermanager VPN Service denial-of-service vulnerability

Overview A vulnerability exists in the Novell Bordermanager VPN service that could allow a remote attacker to cause a denial of service. Description The Novell Bordermanager product includes Virtual Private Network VPN capabilities, including support for the standard Internet Key Exchange IKE...

PPTP Set-Link-Info - Setup of PPTP VPN Channel Detection

Binary data 1170.prm...

Check Point VPN-1 products contain boundary error in the ASN.1 decoding library

Overview A vulnerability exists in Check Point's VPN-1 Server, which is included in many Check Point products. This vulnerability may permit a remote attacker to compromise the gateway system. Description Check Point VPN-1 Server is a Virtual Private Network VPN application. A buffer overflow...

Mandrake Linux Security Advisory : kernel (MDKSA-2002:041)

A problem was discovered in the CIPE VPN tunnel implementation in the Linux kernel where a malformed packet could cause a crash. Andrew Griffiths discovered a vulnerability that allows remote machines to read random memory by utilizing a bug in the ICMP implementation of Linux kernels. This only...

ISS Protection Brief: Checkpoint VPN-1 ASN.1 Decoding Remote Compromise

-----BEGIN PGP SIGNED MESSAGE----- nternet Security Systems Protection Brief July 28, 2004 Check Point VPN-1 ASN.1 Decoding Remote Compromise Summary: ISS has shipped protection for a flaw X-Force has discovered in CheckPoint VPN-1 Server. The Check Point VPN-1 product is widely relied upon to...

Check Point VPN-1 buffer overflow

Buffer overflow on parsing ASN.1 notation...

CVE-2004-0710

The CVE-2004-0710 vulnerability affects the Cisco VPNSM (IPsec VPN Services Module) used in Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Internet Routers. The issue arises when handling malformed Internet Key Exchange (IKE) packets, which could allow remote attackers to cause a denia...

CVE-2004-0469

Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation...

CVE-2004-0611

The CVE-2004-0611 issue affects Netgear FVS318 VPN Router. The Web-Based Administration component is vulnerable to a denial of service when an attacker opens a large number of HTTP connections, rendering the device unable to accept new connections (availability impact). The referenced documents d...

Cisco IPsec VPNSM vulnerable to DoS via malformed IKE packet

Overview A vulnerability in a Cisco VPN module can allow a remote attacker to cause a denial-of-service to the device in which the module is installed. Description The Cisco IP Security IPsec VPN Services Module VPNSM is a high-speed module for the Cisco Catalyst 6500 Series Switch and the Cisco...

OpenBSD 3.x - ISAKMPD Security Association Piggyback Delete Payload Denial of Service

source: https://www.securityfocus.com/bid/10496/info It is reported that OpenBSD's isakmpd daemon is susceptible to a remote denial of service vulnerability. An attacker is able to delete security associations and policies from IPSec VPN's by sending a malformed UDP ISAKMP packet to a vulnerable...

OpenBSD 3.x - ISAKMPD Security Association Piggyback Delete Payload Denial of Service

OpenBSD 3.x - ISAKMPD Security Association Piggyback Delete Payload Denial of Service source: https://www.securityfocus.com/bid/10496/info It is reported that OpenBSD's isakmpd daemon is susceptible to a remote denial of service vulnerability. An attacker is able to delete security associations a...

CVE-2004-0469

The CVE-2004-0469 issue affects Check Point VPN-1 and FireWall-1 NG products, with a buffer overflow in the ISAKMP functionality that could let remote attackers execute arbitrary code during VPN tunnel negotiation. Affected versions are VPN-1/FireWall-1 before R55 HFA-03, R54 HFA-410 and NG FP3 H...