openswan: buffer overflow vulnerability in XAUTH client-side support

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long 1 ciscodnsinfo or 2 ciscodomaininfo data in a packet...

PT-2010-1067

Name of the Vulnerable Software and Affected Versions Openswan versions 2.6.24 through 2.6.28 Description The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely by an authenticated attacker. Specifically, in Openswan 2.6.25 throug...