Moderate: Red Hat Security Advisory: ipsec-tools security update

An updated ipsec-tools package that fixes a bug in parsing of ISAKMP headers is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel. The...

CVE-2005-0398

The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service crash via malformed ISAKMP packets...

CVE-2005-0398

The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service crash via malformed ISAKMP packets...

ISAKMPd/KAME/Racoon multiple bugs

Multiple bugs in RFC 2407-2409 realization...

CVE-2004-0607

The eaycheckx509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication...

GLSA-200406-17 : IPsec-Tools: authentication bug in racoon

The remote host is affected by the vulnerability described in GLSA-200406-17 IPsec-Tools: authentication bug in racoon The KAME IKE daemon racoon is used to authenticate peers during Phase 1 when using either preshared keys, GSS-API, or RSA signatures. When using RSA signatures racoon validates t...

Mandrake Linux Security Advisory : ipsec-tools (MDKSA-2004:027)

A very serious security flaw was discovered by Ralf Spenneberg in racoon, the IKE daemon of the KAME-tools. Racoon does not very the RSA signature during phase one of a connection using either main or aggressive mode. Only the certificate of the client is verified, the certificate is not used to...

Mandrake Linux Security Advisory : ipsec-tools (MDKSA-2004:069)

A vulnerability in racoon prior to version 20040408a would allow a remote attacker to cause a DoS memory consumption via an ISAKMP packet with a large length field. Another vulnerability in racoon was discovered where, when using RSA signatures, racoon would validate the X.509 certificate but wou...

RHEL 3 : ipsec-tools (RHSA-2004:308)

An updated ipsec-tools package that fixes verification of X.509 certificates in racoon is now available. IPSEC uses strong cryptography to provide both authentication and encryption services. When configured to use X.509 certificates to authenticate remote hosts, ipsec-tools versions 0.3.3 and...

security flaw

The eaycheckx509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication...

Fedora Core 2 : ipsec-tools-0.2.5-2 (2004-132)

An updated ipsec-tools package that fixes vulnerabilities in racoon the ISAKMP daemon is now available. When ipsec-tools receives an ISAKMP header, it will attempt to allocate sufficient memory for the entire ISAKMP message according to the header's length field. If an attacker crafts an ISAKMP...

FreeBSD : racoon security association deletion vulnerability (162)

The following package needs to be updated: racoon %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg739bb51d7e8211d896450020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : racoon fails to verify signature during Phase 1 (163)

The following package needs to be updated: racoon %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgd8769838881411d890d10020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 3 : ipsec-tools (RHSA-2004:165)

An updated ipsec-tools package that fixes vulnerabilities in racoon the ISAKMP daemon is now available. IPSEC uses strong cryptography to provide both authentication and encryption services. With versions of ipsec-tools prior to 0.2.3, it was possible for an attacker to cause unauthorized deletio...

CVE-2004-0607

The CVE-2004-0607 issue affects KAME Racoon’s eay_check_x509cert function, which can verify certificates even when OpenSSL validation fails, potentially allowing remote attackers to bypass IKE authentication. Public documents (NVD, JVNDB, OpenVAS entries) confirm the vulnerability, but do not pro...

CVE-2004-0607

The eaycheckx509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication...

CVE-2004-0607

Removed by vendor...

[ GLSA 200406-17 ] IPsec-Tools: authentication bug in racoon

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200406-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

IPsec-Tools: authentication bug in racoon

Background IPsec-Tools is a port of KAME's implementation of the IPsec utilities. It contains a collection of network monitoring tools, including racoon, ping, and ping6. Description The KAME IKE daemon racoon is used to authenticate peers during Phase 1 when using either preshared keys, GSS-API,...

CVE-2004-0392

racoon before 20040407b allows remote attackers to cause a denial of service infinite loop and dropped connections via an IKE message with a malformed Generic Payload Header containing invalid 1 "Security Association Next Payload" and 2 "RESERVED" fields...