CVE		CVE-2008-3651
Status		Candidate
Description		Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.
Phase		Assigned (12.08.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3651
References		APPLE : APPLE-SA-2009-05-12
		APPLE : APPLE-SA-2009-06-17-1
		BID : 30657
		CERT : TA09-133A
		CONFIRM : http://sourceforge.net/project/shownotes.php?relea...
		CONFIRM : http://support.apple.com/kb/HT3549
		CONFIRM : http://support.apple.com/kb/HT3639
		CONFIRM : https://bugzilla.redhat.com/show_bug.cgi?id=456660
		GENTOO : GLSA-200812-03
		MANDRIVA : MDVSA-2008:181
		MLIST : [ipsec-tools-announce] 20080724 Ipsec-tools 0.7.1 released
		MLIST : [ipsec-tools-devel] 20080724 Ipsec-tools 0.7.1 released
		OVAL : oval:org.mitre.oval:def:10453
		REDHAT : RHSA-2008:0849
		SECTRACK : 1020667
		SECUNIA : 31450
		SECUNIA : 31624
		SECUNIA : 32759
		SECUNIA : 32971
		SECUNIA : 35074
		SUSE : SUSE-SR:2008:025
		SUSE : SUSE-SR:2009:004
		UBUNTU : USN-641-1
		VUPEN : ADV-2008-2345
		VUPEN : ADV-2008-2844
		VUPEN : ADV-2009-1297
		VUPEN : ADV-2009-1621
		XF : ipsectools-racoon-dos(44395)
SecurityVulns:		ipsec-tools / racoon IPSec DoS
		Apple Mac OS X multiple security vulnerabilities