CVE Vulnerabilities

CVE-2004-0607

Published: Dec 06, 2004 | Modified: Oct 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.

Affected Software

Name Vendor Start Version End Version
Ipsec-tools Ipsec-tools 0.3 0.3
Ipsec-tools Ipsec-tools 0.3.1 0.3.1
Ipsec-tools Ipsec-tools 0.3.2 0.3.2
Ipsec-tools Ipsec-tools 0.3_rc1 0.3_rc1
Ipsec-tools Ipsec-tools 0.3_rc2 0.3_rc2
Ipsec-tools Ipsec-tools 0.3_rc3 0.3_rc3
Ipsec-tools Ipsec-tools 0.3_rc4 0.3_rc4
Ipsec-tools Ipsec-tools 0.3_rc5 0.3_rc5
Racoon Kame * *
Racoon Kame 2003-07-11 2003-07-11
Racoon Kame 2004-04-05 2004-04-05
Racoon Kame 2004-04-07b 2004-04-07b
Racoon Kame 2004-05-03 2004-05-03
Red Hat Enterprise Linux 3 RedHat ipsec-tools-0:0.2.5-0.5 *

References