CVE-2004-0155 in Racooninfo

Summary

The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

02/13/2004

Disclosure

06/01/2004

CPE

ready

CVSS

7.3

EPSS

0.05189

Activities

Very Low

Sources

Might our Artificial Intelligence support you?

Check our Alexa App!