8700 matches found
CVE-2005-2640
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but...
CVE-2005-2640
The CVE describes a behavioral discrepancy information leak in Juniper Netscreen VPNs running ScreenOS 5.2.0 and earlier. When using IKE with pre-shared key authentication, remote attackers can enumerate valid usernames by sending an IKE Aggressive Mode packet: a response is generated for valid u...
CVE-2005-2640
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but...
Juniper NetScreen 5.0 - VPN Username Enumeration
Juniper NetScreen 5.0 - VPN Username Enumeration source: https://www.securityfocus.com/bid/14595/info The Juniper Netscreen VPN implementation will identify valid usernames in IKE aggressive mode, when pre-shared key authentication is used. This allows for attackers to obtain a list of valid VPN...
Juniper NetScreen 5.0 - VPN 'Username' Enumeration
source: https://www.securityfocus.com/bid/14595/info The Juniper Netscreen VPN implementation will identify valid usernames in IKE aggressive mode, when pre-shared key authentication is used. This allows for attackers to obtain a list of valid VPN users. With a valid username, an attacker can...
[Full-disclosure] Juniper Netscreen VPN Username Enumeration Vulnerability
Juniper Netscreen VPN Username Enumeration Vulnerability 1. Overview NTA Monitor has discovered a VPN username enumeration vulnerability in the Juniper Netscreen integrated Firewall/VPN products while performing a VPN security test for a customer. The vulnerability affects remote access VPNs know...
Juniper Netscreen VPN user enumeration
Different reply for existing user in IKE...
CVE-2005-2579
Nortel Contivity VPN Client V0501.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box...
CVE-2005-2579
CVE-2005-2579 affects Nortel Contivity VPN Client (V05_01.030). The issue is that when configuring a certificate for authentication, the process does not properly drop system privileges, enabling local users to gain privileges by launching a program via the File Open dialog box. Documented impact...
CVE-2005-2579
Nortel Contivity VPN Client V0501.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box...
Nortel Contivity VPN Client privilege escalation
File open dialog exllows to execute file with LocalSystem privileges...
FW: Updated Version & Exploit - Privilege escalation in Nortel Contivity VPN Client V05_01.030
Updated to add additional version & exploit details. Reps to Crime Dog Vulnerable Versions: Nortel Contivity VPN Client V0501.100 Patches/Workarounds: Good question Exploit: 1. With the Contivity client open click go into "Group Authentication Options" 2. Select "Challenge Response Token" options...
ContivitySystem.txt
Summary: Privilege escalation in Nortel Contivity VPN Client V0501.030 http://www.nortel.com Details: The Contivity VPN Client is a Windows application that lets you define and store connection information for accessing your corporate network through a Contivity Secure IP Services Gateway. When t...
Privilege escalation in Nortel Contivity VPN Client V05_01.030
Summary: Privilege escalation in Nortel Contivity VPN Client V0501.030 http://www.nortel.com Details: The Contivity VPN Client is a Windows application that lets you define and store connection information for accessing your corporate network through a Contivity Secure IP Services Gateway. When t...
SSH IPSEC Express 3.0.1 VPN Detection
Binary data 3081.prm...
SSH IPSEC Express 2.0.0 VPN Detection
Binary data 3076.prm...
SSH IPSEC Express 2.1.0 VPN Detection
Binary data 3077.prm...
SSH IPSEC Express 4.0.0 VPN Detection
Binary data 3082.prm...