Description

Two vulnerabilities in IPsec-Tools can be exploited by malicious people to cause a DoS (Denial of Service) or bypass certain security restrictions.

1) An error within the processing of ISAKMP packets with extremely large values in the header's length field can be exploited to crash the service.

For more information:
SA11410

The vulnerability affects versions prior to 0.3.1.

2) An error within the validation of X.509 certificates may result in invalid certificates being accepted.

For more information:
SA11863

The vulnerability affects versions prior to 0.3.3.

Solution
Update to version 0.3.3.
Further details available to Secunia VIM customers

Original Advisory
http://sourceforge.net/project/shownotes.php?release_id=232288
http://sourceforge.net/project/shownotes.php?release_id=245982

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers