Genova GeNUGate Multiple Unspecified Denial Of Service Vulnerabilities
BID:10912
Info
Genova GeNUGate Multiple Unspecified Denial Of Service Vulnerabilities
| Bugtraq ID: | 10912 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 10 2004 12:00AM |
| Updated: | Aug 10 2004 12:00AM |
| Credit: | These vulnerabilities were reported by the vendor. |
| Vulnerable: |
Genova GeNUGate 5.0 .0 Genova GeNUGate 4.2.7 Genova GeNUGate 4.1.13 |
| Not Vulnerable: |
Genova GeNUGate 5.0.1 Genova GeNUGate 4.2.8 Genova GeNUGate 4.1.14 |
Discussion
Genova GeNUGate Multiple Unspecified Denial Of Service Vulnerabilities
It is reported that GeNUGate is prone to two unspecified denial of service vulnerabilities.
The first vulnerability is reported in the ISAKMP (Internet Security Association and Key Management Protocol) process. It is reported that an attacker sending malicious packets to the ISAKMP process can delete VPN security associations. This may be related to BID 10496.
The second vulnerability is reported in web applications embedded in GeNUGate utilizing OpenSSL. An unspecified OpenSSL denial of service vulnerability can reportedly crash the applications.
A remote attacker may exploit these vulnerabilities to deny service to legitimate users of the affected application.
It is reported that GeNUGate is prone to two unspecified denial of service vulnerabilities.
The first vulnerability is reported in the ISAKMP (Internet Security Association and Key Management Protocol) process. It is reported that an attacker sending malicious packets to the ISAKMP process can delete VPN security associations. This may be related to BID 10496.
The second vulnerability is reported in web applications embedded in GeNUGate utilizing OpenSSL. An unspecified OpenSSL denial of service vulnerability can reportedly crash the applications.
A remote attacker may exploit these vulnerabilities to deny service to legitimate users of the affected application.
Exploit / POC
Genova GeNUGate Multiple Unspecified Denial Of Service Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Genova GeNUGate Multiple Unspecified Denial Of Service Vulnerabilities
Solution:
The vendor has released updated versions of the software addressing these issues. Users of affected packages are urged to contact the vendor for information on obtaining fixes.
Solution:
The vendor has released updated versions of the software addressing these issues. Users of affected packages are urged to contact the vendor for information on obtaining fixes.
References
Genova GeNUGate Multiple Unspecified Denial Of Service Vulnerabilities
References:
References:
- GeNUGate Home Page (Genova)
- Liste aktueller Patches zu GeNUGate 4.1 (Genova)
- Liste aktueller Patches zu GeNUGate 4.2 (Genova)
- Liste aktueller Patches zu GeNUGate 5.0 (Genova)