IPsec-Tools Prior to 0.7.2 Multiple Remote Denial Of Service Vulnerabilities

Bugtraq ID:	34765
Class:	Unknown
CVE:	CVE-2009-1574 CVE-2009-1632
Remote:	Yes
Local:	No
Published:	Apr 22 2009 12:00AM
Updated:	Mar 19 2015 08:23AM
Credit:	Neil Kettle, stephen.bevan, and the vendor.
Vulnerable:	Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SP3 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 11 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise Server 10 SuSE SUSE Linux Enterprise Desktop 10 SP2 SuSE SUSE Linux Enterprise Desktop 10 SP1 SuSE SUSE Linux Enterprise Desktop 10 SuSE SUSE Linux Enterprise 10 SP2 DEBUGINFO SuSE SUSE Linux Enterprise 10 SP1 DEBUGINFO SuSE openSUSE 10.3 S.u.S.E. SUSE Linux Enterprise Server RT Solution 10 0 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Red Hat Fedora 9 Red Hat Fedora 10 Red Hat Enterprise Linux EUS 5.3.z server Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux 5 Server Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 IPsec-Tools IPsec-Tools 0.7.1 IPsec-Tools IPsec-Tools 0.6.7 IPsec-Tools IPsec-Tools 0.6.6 IPsec-Tools IPsec-Tools 0.6.3 IPsec-Tools IPsec-Tools 0.6.2 IPsec-Tools IPsec-Tools 0.6.1 IPsec-Tools IPsec-Tools 0.6 IPsec-Tools IPsec-Tools 0.5.2 IPsec-Tools IPsec-Tools 0.5.1 IPsec-Tools IPsec-Tools 0.5 IPsec-Tools IPsec-Tools 0.4 rc1 IPsec-Tools IPsec-Tools 0.3.3 IPsec-Tools IPsec-Tools 0.3.2 IPsec-Tools IPsec-Tools 0.3.1 IPsec-Tools IPsec-Tools 0.3 rc5 IPsec-Tools IPsec-Tools 0.3 rc4 IPsec-Tools IPsec-Tools 0.3 rc3 IPsec-Tools IPsec-Tools 0.3 rc2 IPsec-Tools IPsec-Tools 0.3 rc1 IPsec-Tools IPsec-Tools 0.3 IPsec-Tools IPsec-Tools 0.2.5 IPsec-Tools IPsec-Tools 0.2.4 IPsec-Tools IPsec-Tools 0.2.3 IPsec-Tools IPsec-Tools 0.2.2 IPsec-Tools IPsec-Tools 0.2.1 IPsec-Tools IPsec-Tools 0.2 IPsec-Tools IPsec-Tools 0.1 IPsec-Tools IPsec-Tools 0.7 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Apple Time Capsule Firmware 7.5 Apple Time Capsule Firmware 7.4.2 Apple Time Capsule Firmware 7.4.1 Apple Time Capsule 0 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.3.9 Apple Mac OS X Server 10.3.8 Apple Mac OS X Server 10.3.7 Apple Mac OS X Server 10.3.6 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.6 Apple Mac OS X Server 10.5 Apple Mac OS X 10.6.1 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 Apple Mac OS X 10.6 Apple Mac OS X 10.5 Apple AirPort Extreme Firmware 7.4.2 Apple AirPort Extreme Firmware 7.3.1 Apple AirPort Extreme Firmware 7.2.1 Apple AirPort Extreme Firmware 5.7 Apple AirPort Extreme Firmware 5.5 Apple AirPort Extreme Firmware 7.5 Apple AirPort Extreme Firmware 7.1 Apple AirPort Extreme Firmware 7.0 Apple AirPort Extreme Base Station with 802.11n Firmware 7.4.1 Apple AirPort Extreme Base Station 0 Apple Airport Extreme 0 Apple AirPort Express Firmware 6.3 Apple AirPort Express Firmware 6.1 Apple AirPort Express Base Station with 802.11n Firmware 7.4.1 Apple Airport Express 0
Not Vulnerable:	IPsec-Tools IPsec-Tools 0.7.2 Apple Time Capsule Firmware 7.5.2 Apple Mac OS X Server 10.6.2 Apple Mac OS X 10.6.2 Apple AirPort Extreme Base Station with 802.11n Firmware 7.5.2 Apple AirPort Express Base Station with 802.11n Firmware 7.5.2

IPsec-Tools Prior to 0.7.2 Multiple Remote Denial Of Service Vulnerabilities

IPsec-Tools is affected by multiple remote denial-of-service vulnerabilities because the software fails to properly handle certain network packets.

A successful attack allows a remote attacker to cause the application to crash or to consume excessive memory, denying further service to legitimate users.

Versions prior to IPsec-Tools 0.7.2 are vulnerable.

IPsec-Tools Prior to 0.7.2 Multiple Remote Denial Of Service Vulnerabilities

The following exploit is available:

• /data/vulnerabilities/exploits/34765.c

IPsec-Tools Prior to 0.7.2 Multiple Remote Denial Of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu ipsec-tools_0.7-2.1ubuntu1.8.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/ipsec-tools/ipsec-tools_0.7-2.1ubu ntu1.8.10.1_powerpc.deb


• Ubuntu racoon_0.7-2.1ubuntu1.8.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/ipsec-tools/racoon_0.7-2.1ubuntu1. 8.10.1_powerpc.deb

Mandriva Linux Mandrake 2008.0

• Mandriva flex-2.5.33-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva ipsec-tools-0.7.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libipsec-devel-0.7.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libipsec0-0.7.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu ipsec-tools_0.7-2.1ubuntu1.9.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/ipsec-tools/ipsec-tools_0.7-2.1ubu ntu1.9.04.1_sparc.deb


• Ubuntu racoon_0.7-2.1ubuntu1.9.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/ipsec-tools/racoon_0.7-2.1ubuntu1. 9.04.1_sparc.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu ipsec-tools_0.7-2.1ubuntu1.8.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/ipsec-tools/ipsec-tools_0.7-2.1ubu ntu1.8.10.1_sparc.deb


• Ubuntu racoon_0.7-2.1ubuntu1.8.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/ipsec-tools/racoon_0.7-2.1ubuntu1. 8.10.1_sparc.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu ipsec-tools_0.7-2.1ubuntu1.9.04.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/ipsec-tools/ipsec-tools_0.7-2.1ubu ntu1.9.04.1_lpia.deb


• Ubuntu racoon_0.7-2.1ubuntu1.9.04.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/ipsec-tools/racoon_0.7-2.1ubuntu1. 9.04.1_lpia.deb

Apple Mac OS X 10.6

• Apple MacOSXUpdCombo10.6.2.dmg
  For Mac OS X v10.6
  http://www.apple.com/support/downloads/

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva flex-2.5.35-2.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva ipsec-tools-0.7.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64ipsec-devel-0.7.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64ipsec0-0.7.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu ipsec-tools_0.7-2.1ubuntu1.9.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_ 0.7-2.1ubuntu1.9.04.1_amd64.deb


• Ubuntu racoon_0.7-2.1ubuntu1.9.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.7-2 .1ubuntu1.9.04.1_amd64.deb

Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva flex-2.5.33-3.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva ipsec-tools-0.7.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64ipsec-devel-0.7.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64ipsec0-0.7.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

IPsec-Tools IPsec-Tools 0.7

• IPsec-Tools ipsec-tools-0.7.2.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=74601&filename =ipsec-tools-0.7.2.tar.gz

Mandriva Linux Mandrake 2008.1

• Mandriva flex-2.5.33-3.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva ipsec-tools-0.7.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libipsec-devel-0.7.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libipsec0-0.7.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva flex-2.5.35-3.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva ipsec-tools-0.7.2-0.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64ipsec-devel-0.7.2-0.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64ipsec0-0.7.2-0.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu ipsec-tools_0.7-2.1ubuntu1.8.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_ 0.7-2.1ubuntu1.8.10.1_i386.deb


• Ubuntu racoon_0.7-2.1ubuntu1.8.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.7-2 .1ubuntu1.8.10.1_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu ipsec-tools_0.6.7-1.1ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/i/ipsec-tools/ipsec-tools_0.6.7-1.1u buntu1.2_lpia.deb


• Ubuntu racoon_0.6.7-1.1ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/i/ipsec-tools/racoon_0.6.7-1.1ubuntu 1.2_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu ipsec-tools_0.6.5-4ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_ 0.6.5-4ubuntu1.3_i386.deb


• Ubuntu racoon_0.6.5-4ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.5 -4ubuntu1.3_i386.deb

IPsec-Tools IPsec-Tools 0.1

• IPsec-Tools ipsec-tools-0.7.2.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=74601&filename =ipsec-tools-0.7.2.tar.gz

IPsec-Tools IPsec-Tools 0.2

• IPsec-Tools ipsec-tools-0.7.2.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=74601&filename =ipsec-tools-0.7.2.tar.gz

IPsec-Tools IPsec-Tools 0.2.2

• IPsec-Tools ipsec-tools-0.7.2.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=74601&filename =ipsec-tools-0.7.2.tar.gz

IPsec-Tools IPsec-Tools 0.2.4

• IPsec-Tools ipsec-tools-0.7.2.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=74601&filename =ipsec-tools-0.7.2.tar.gz

IPsec-Tools IPsec-Tools 0.3 rc5

• IPsec-Tools ipsec-tools-0.7.2.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=74601&filename =ipsec-tools-0.7.2.tar.gz

IPsec-Tools IPsec-Tools 0.3 rc3

• IPsec-Tools ipsec-tools-0.7.2.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=74601&filename =ipsec-tools-0.7.2.tar.gz

IPsec-Tools IPsec-Tools 0.3 rc2

• IPsec-Tools ipsec-tools-0.7.2.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=74601&filename =ipsec-tools-0.7.2.tar.gz

IPsec-Tools IPsec-Tools 0.3

• IPsec-Tools ipsec-tools-0.7.2.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=74601&filename =ipsec-tools-0.7.2.tar.gz

IPsec-Tools IPsec-Tools 0.3.2

• IPsec-Tools ipsec-tools-0.7.2.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=74601&filename =ipsec-tools-0.7.2.tar.gz

IPsec-Tools IPsec-Tools 0.6

• IPsec-Tools ipsec-tools-0.7.2.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=74601&filename =ipsec-tools-0.7.2.tar.gz

IPsec-Tools IPsec-Tools 0.6.1

• IPsec-Tools ipsec-tools-0.7.2.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=74601&filename =ipsec-tools-0.7.2.tar.gz

IPsec-Tools IPsec-Tools 0.6.7

• IPsec-Tools ipsec-tools-0.7.2.tar.gz
  http://sourceforge.net/project/downloading.php?group_id=74601&filename =ipsec-tools-0.7.2.tar.gz

Apple Mac OS X 10.6.1

• Apple MacOSXUpd10.6.2.dmg
  For Mac OS X v10.6.1
  http://www.apple.com/support/downloads/

IPsec-Tools Prior to 0.7.2 Multiple Remote Denial Of Service Vulnerabilities

References:

• #303 (memory leak when using certificate for authentication) (stephen.bevan)
  
• Fix a possible null pointer dereference in fragmentation code. (tteras )
  
• IPsec Tools 0.7.2 Release Notes (IPsec Tools)
  
• ipsec-tools 0.7.2 (Tomas Hoger)
  
• IPsec-Tools Homepage (IPsec-Tools)
  
• IPSec-Tools Null Pointer Dereference (xorl)
  
• Important: ipsec-tools security update (Red Hat)