CVE

Id
51985  
CVE No.
CVE-2011-4073  
Status
Candidate  
Description
Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quick_outI1_continue and (2) quick_outI1 functions.  
Phase
Assigned (20111018)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
557002 51985 CVE-2011-4073 CONFIRM:http://www.openswan.org/download/CVE-2011-4073/CVE-2011-4073.txt  View
557003 51985 CVE-2011-4073 DEBIAN:DSA-2374  View
557004 51985 CVE-2011-4073 URL:http://www.debian.org/security/2011/dsa-2374  View
557005 51985 CVE-2011-4073 REDHAT:RHSA-2011:1422  View
557006 51985 CVE-2011-4073 URL:http://www.redhat.com/support/errata/RHSA-2011-1422.html  View
557007 51985 CVE-2011-4073 BID:50440  View
557008 51985 CVE-2011-4073 URL:http://www.securityfocus.com/bid/50440  View
557009 51985 CVE-2011-4073 SECTRACK:1026268  View
557010 51985 CVE-2011-4073 URL:http://www.securitytracker.com/id?1026268  View
557011 51985 CVE-2011-4073 SECUNIA:46678  View
557012 51985 CVE-2011-4073 URL:http://secunia.com/advisories/46678  View
557013 51985 CVE-2011-4073 SECUNIA:46681  View
557014 51985 CVE-2011-4073 URL:http://secunia.com/advisories/46681  View
557015 51985 CVE-2011-4073 SECUNIA:47342  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32531 JVNDB-2011-002771 Roundcube Webmail の include/iniset.php におけるサービス運用妨害 (DoS) の脆弱性 Roundcube Webmail の include/iniset.php には、PHP 5.3.7 または 5.3.8 を使用している場合、任意の URL への GET リクエストを誘発する、およびサービス運用妨害 (リソース消費および inbox 停止) 状態となる脆弱性が存在します。 CVE-2011-4078 51985 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002771.html  View