CVEvulnerability
CVE-2008-1198
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:C/I:N/A:N
Description
The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.
Affected configurations
• redhat enterprise linux 4.0
• redhat enterprise linux 3.0
• redhat enterprise linux 5.0
References
- http://secunia.com/advisories/48045 Broken Link
- http://www.ernw.de/download/pskattack.pdf Exploit
- http://www.securitytracker.com/id?1019563 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=435274 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41053 VDB Entry
- http://secunia.com/advisories/48045 Broken Link
- http://www.ernw.de/download/pskattack.pdf Exploit
- http://www.securitytracker.com/id?1019563 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=435274 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41053 VDB Entry