CVEvulnerability

CVE-2004-0607

10.0 HIGH Published 2004-12-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.

Affected configurations

• ipsec-tools ipsec-tools 0.3 • ipsec-tools ipsec-tools 0.3.1 • ipsec-tools ipsec-tools 0.3.2 • ipsec-tools ipsec-tools 0.3 rc1 • ipsec-tools ipsec-tools 0.3 rc2 • ipsec-tools ipsec-tools 0.3 rc3 • ipsec-tools ipsec-tools 0.3 rc4 • ipsec-tools ipsec-tools 0.3 rc5 • kame racoon • kame racoon 2003-07-11 • kame racoon 2004-04-05 • kame racoon 2004-04-07b • kame racoon 2004-05-03 • redhat enterprise linux 3.0 • redhat enterprise linux desktop 3.0

References