CVE-2004-0607 in kame racoon

Summary

the eay_check_x509cert function in kame racoon successfully verifies certificates even when openssl validation fails which could allow remote attackers to bypass authentication.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 06/29/2004
• Disclosure: 12/06/2004
• Moderation: VulDB entry created
• Entries: VDB-22530 (1)
• CPE: ready
• CWE: CWE-287 (Confirmed)
• CVSS: 9.8
• EPSS: 0.03012
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0607
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0607
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0607/