[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <Pine.GSO.4.51.0905061209360.3040@faron.mitre.org>
Date: Wed, 6 May 2009 12:09:40 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security@...ts.openwall.com
cc: coley@...re.org
Subject: Re: ipsec-tools 0.7.2
======================================================
Name: CVE-2009-1574
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1574
Reference: MLIST:[oss-security] 20090429 ipsec-tools 0.7.2
Reference: URL:http://www.openwall.com/lists/oss-security/2009/04/29/6
Reference: MLIST:[oss-security] 20090504 Re: ipsec-tools 0.7.2
Reference: URL:http://www.openwall.com/lists/oss-security/2009/05/04/3
Reference: CONFIRM:http://sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611
Reference: CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=497990
racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote
attackers to cause a denial of service (crash) via crafted fragmented
packets without a payload, which triggers a NULL pointer dereference.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
