CVE-2010-3308 in Openswan

Summary

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long cisco_banner (aka server_banner) field.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 09/13/2010
• Disclosure: 10/05/2010
• Moderation: VulDB entry created
• Entries: 1: VDB-54905
• CPE: ready
• CWE: CWE-94 (Confirmed)
• CVSS: 6.3
• EPSS: 0.04739
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2010-3308
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-3308
• CVE Details: https://www.cvedetails.com/cve/CVE-2010-3308/