Vulnerabilities for Provider-1 (...) - CXSECURITY.COM

Vulnerabilities for 'Provider-1'

2004-11-23

CVE-2004-0112

CWE-Other

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.

CVE-2004-0081

CWE-Other

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

CVE-2004-0079

CWE-Other

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

2001-07-12

CVE-2001-1176

Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.

>>> Vendor: Checkpoint 43 Products

Check point vpn

Next generation

Vpn-1 firewall-1

Check point integrity client

Zonealarm security suite

Vpn-1 firewall-1 next generation

Secureclient ng

Vpn-1 secureclient

Endpoint security

Web intelligence

Security gateway

Management server

Vpn-1 utm edge w embedded ngx

Check point vpn-1 pro

Vpn-1 power utm

Vpn-1 power utm with ngx

Firewall-1 pki web service

Vpn-1 firewall-1 vsx

Multi-domain management/provider-1

Endpoint connect

Endpoint security vpn

Remote access clients

Zonealarm extreme security

Endpoint security mi server r73

Session authentication agent

Smartconsole for endpoint security server

Endpoint security clients

Zonealarm anti-ransomware

Mobile access portal agent

Harmony endpoint

Copyright 2024, cxsecurity.com