TITLE:
SUSE update for ipsec-tools / freeswan / openswan

SECUNIA ADVISORY ID:
SA18115

VERIFY ADVISORY:
http://secunia.com/advisories/18115/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
>From remote

OPERATING SYSTEM:
SUSE Linux 10
http://secunia.com/product/6221/
SuSE Linux 9.1
http://secunia.com/product/3473/
SUSE Linux 9.2
http://secunia.com/product/4258/
SUSE Linux 9.3
http://secunia.com/product/4933/
SUSE Linux Enterprise Server 9
http://secunia.com/product/4118/

DESCRIPTION:
SUSE has issued updates for ipsec-tools / freeswan / openswan. This
fixes some vulnerabilities, which can be exploited by malicious
people to cause a DoS (Denial of Service).

For more information:
SA17581
SA17668

SOLUTION:
Apply updated packages:

-- x86 Platform --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/ipsec-tools-0.6-4.2.i586.rpm
f82b5941ca8143a7f81315f2309c28e9
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/openswan-2.4.4-1.1.i586.rpm
9d2318b4da837ae3175547ba261235c5

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/ipsec-tools-0.5-5.2.i586.rpm
57b586b7aaa612c6250a8b037afe9335
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/openswan-2.2.0-12.4.i586.rpm
6c152ba37641677fc4c59c44199a9225

SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/ipsec-tools-0.4rc1-3.4.i586.rpm
ca1ffa39b311744976bc9754f003c71f
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/openswan-2.2.0-8.4.i586.rpm
88dedfd8ad12456158b0f60d0a4714f4

SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/freeswan-2.04_1.5.4-1.23.i586.rpm
64b2fc324586f4af0060b8dd0c6597eb
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/ipsec-tools-0.3.3-1.9.i586.rpm
c523ed28073d5d76a1468763cc3820ea

-- Power PC Platform --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/ipsec-tools-0.6-4.2.ppc.rpm
fc12c770db47d6a51b7cfc7e92b0f003
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/openswan-2.4.4-1.1.ppc.rpm
6a0c80ce5f3a489221e605ea7ee724d5

-- x86-64 Platform --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/ipsec-tools-0.6-4.2.x86_64.rpm
7550e022c5557841a06c6334d1a2632c
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/openswan-2.4.4-1.1.x86_64.rpm
b25da775ec60a014febb111179a42e91

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/ipsec-tools-0.5-5.2.x86_64.rpm
8ee673f4f3386e6e0a5ea123cad19064
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/openswan-2.2.0-12.4.x86_64.rpm
b65ee8de2eae744f40b7d33ae912995c

SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/ipsec-tools-0.4rc1-3.4.x86_64.rpm
8e4f8794e3f8322b4b5c301d964cfabd
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/openswan-2.2.0-8.4.x86_64.rpm
30af3b8e87fe2018ae2b4a1a884887e2

SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/freeswan-2.04_1.5.4-1.23.x86_64.rpm
dbdf3e6c1d45a0e42f0facfd78edc29c
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/ipsec-tools-0.3.3-1.9.x86_64.rpm
bcf17a5cd915276de386e8181c87ec99

-- Sources --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/ipsec-tools-0.6-4.2.src.rpm
6ecfb0963c478d0962fad9146110466c
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/openswan-2.4.4-1.1.src.rpm
e8f841c893e062f2e378eb269ba7d128

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/ipsec-tools-0.5-5.2.src.rpm
0944add00587f50f20c5f7a38fac5b4f
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/openswan-2.2.0-12.4.src.rpm
5d89968ca8f4b1718f0018c8c466ddf9

SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/src/ipsec-tools-0.4rc1-3.4.src.rpm
26d12b6a99b2723272a74f402ba4ff58
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/src/openswan-2.2.0-8.4.src.rpm
f097a1113a838a007c586c72bb7e43a2

SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/freeswan-2.04_1.5.4-1.23.src.rpm
362067f9c39a902c433af5f998b4eecf
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/ipsec-tools-0.3.3-1.9.src.rpm
b7443b44f2ee6cab65f214e6e983f113
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/freeswan-2.04_1.5.4-1.23.src.rpm
95d18a7cf39acaabb747edfc7b5411cd
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/ipsec-tools-0.3.3-1.9.src.rpm
517f4afbe1f3d1b3ad554582d4463bb2

ORIGINAL ADVISORY:
http://lists.suse.com/archive/suse-security-announce/2005-Dec/0007.html

OTHER REFERENCES:
SA17581:
http://secunia.com/advisories/17581/

SA17668:
http://secunia.com/advisories/17668/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------