CVE-2004-0590 in Openswan
요약 (영어)
FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
예약하다
2004. 06. 23.
공개
2004. 12. 06.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 733 | GNU Openswan verify_x509cert 약한 인증 | 287 | 정의되지 않음 | 공식 수정 | CVE-2004-0590 |