CVE-2005-3768

Buffer overflow in the Internet Key Exchange version 1 IKEv1 implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafte...

[SA17684] Symantec Firewall/VPN/Gateway ISAKMP Message Processing Denial of Service

TITLE: Symantec Firewall/VPN/Gateway ISAKMP Message Processing Denial of Service SECUNIA ADVISORY ID: SA17684 VERIFY ADVISORY: http://secunia.com/advisories/17684/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Symantec Gateway Security 400 Series...

CVE-2005-3768

CVE-2005-3768 affects Symantec Dynamic VPN Services (Enterprise Firewall, Gateway Security, and Firewall/VPN Appliance) in the IKEv1 implementation. A buffer overflow in IKEv1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demo...

Symantec Dynamic VPN Services: ISAKMP Denial of Service

SUMMARY The NISCC National Infrastructure Security Co-ordination Centre a UK-sponsored inter-departmental agency has identified nearly five-thousand potential ISAKMP vulnerabilities. Test for these vulnerabilities were created by the NISCC and distributed to an unspecified number of vendors...

[SA17621] Check Point Firewall/VPN ISAKMP IKE Message Processing Denial of Service

TITLE: Check Point Firewall/VPN ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17621 VERIFY ADVISORY: http://secunia.com/advisories/17621/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Check Point NGX http://secunia.com/product/6010/ SOFTWARE:...

CVE-2002-2139

Cisco PIX Firewall versions affected include 6.0.3 and earlier, and 6.1.x up to 6.1.3. The vulnerability arises because duplicate ISAKMP Security Associations (SAs) for a VPN session are not deleted, enabling a local attacker to hijack a session via a man-in-the-middle attack. The CVE entry from ...

Cisco IPSec Unspecified IKE Traffic Denial Of Service Vulnerabilities

Description Various Cisco IOS, PIX Firewall, Firewall Services Module FWSM, VPN 3000 Series Concentrator, and MDS Series SanOS releases are prone to denial of service attacks. These issues are due to security flaws in Cisco's IPSec implementation. The vulnerabilities may be triggered by malformed...

Aventail ASAP detection

The remote host seems to be an Aventail SSL VPN appliance, connections are allowed to the web console management. Letting attackers know that you are using this software will help them to focus their attack or will make them change their strategy. In addition to this, an attacker may attempt to s...

Aventail ASAP Detection (HTTP)

HTTP based detection of Aventail SSL VPN appliance. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IPSEC IKE check

The remote IPSEC server seems to have a problem negotiating bogus IKE requests. SPDX-FileCopyrightText: 2002 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Bert Salaets: Som...

Detect STUN Server

A VPN server is listening on the remote port. Description : The remote host is running a STUN Simple Traversal of User Datagram Protocol - RFC 3489 server. Simple Traversal of User Datagram Protocol UDP Through Network Address Translators NATs STUN is a lightweight protocol that allows applicatio...

Cisco bug ID CSCdu35577 (Web Check)

The remote VPN concentrator gives out too much information in application layer banners. An incorrect page request provides the specific version of software installed. This vulnerability is documented as Cisco bug ID CSCdu35577. OpenVAS Vulnerability Test $Id: CSCdu35577web.nasl 8023 2017-12-07...

IPSEC IKE check

The remote IPSEC server seems to have a problem negotiating bogus IKE requests. An attacker may use this flaw to disable your VPN remotely. OpenVAS Vulnerability Test $Id: ikecheck.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: IPSEC IKE check Authors: John Lampe Script audit and...

PPTP Service Detection

The remote host seems to be running a PPTP VPN service, this service allows remote users to connect to the internal network and play a trusted rule in it. This service should be protect with encrypted username & password combinations, and should be accessible only to trusted individuals. By defau...

Cisco VPN 3000 Series Concentrator Information Disclosure Vulnerability (CSCdu35577) - Active Check

Cisco VPN 3000 series concentrators are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2004 Michael J. Richardson Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Checkpoint VPN-1 DoS

Flood with specific spoofed packets from local network causes firewall to hang...

Google Secure Access VPN Client Installed

The remote host has the program 'Google Secure Access' installed. This software is a VPN client allowing roaming users to establish a VPN connection with Google's VPN server, thus protecting the local communications from being eavesdropped by a local user. This potentially allows Google to...

[Full-disclosure] Checkpoint VPN DoS woes

While tinkering with my VPN connections, servers, firewalls and routers, I brang down the network to its knees with an attack from one machine to itself using a spoofed private address. The program I was using was something I wrote and it shredded my Checkpoint and its VPN's to oblivion both...

Denial and then when the“script kids”to become a real hacker! - Vulnerability warning-the black bar safety net

On hack how to make online with the n version. But mostly grandstanding. Look at this now, is I online can see the detailed tutorial. I believe you will certainly have the benefits. Transferred from: tsinghua bbs Basis: How to learn ·To have learning objectives ·Have a learning plan ·To have the...

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness ================================================================== Product: ======== Astaro Security Linux 6.0 is a network security solution, including a combination of the following security applications: - Stateful inspection...