Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

kame racoon vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2004-0607
The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote malicious users to bypass authentication.
Ipsec-tools Ipsec-tools 0.3Ipsec-tools Ipsec-tools 0.3.1Kame RacoonKame Racoon 2003-07-11Ipsec-tools Ipsec-tools 0.3.2Ipsec-tools Ipsec-tools 0.3 Rc1Kame Racoon 2004-04-05Kame Racoon 2004-04-07bIpsec-tools Ipsec-tools 0.3 Rc2Ipsec-tools Ipsec-tools 0.3 Rc3Kame Racoon 2004-05-03Ipsec-tools Ipsec-tools 0.3 Rc4Ipsec-tools Ipsec-tools 0.3 Rc5Redhat Enterprise Linux 3.0Redhat Enterprise Linux Desktop 3.0
7.5
CVSSv2
CVE-2004-0155
The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote malicious users to establish unauthorized IP connections or conduct man-in-the-middle attacks using a v...
Kame Racoon
5
CVSSv2
CVE-2006-1646
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x prior to 20060119, certain FreeBSD releases, and possibly other distributions of BSD or Linux operating systems, when running in aggress...
Internet Key Exchange Internet Key Exchange 1
5
CVSSv2
CVE-2005-0398
The KAME racoon daemon in ipsec-tools prior to 0.5 allows remote malicious users to cause a denial of service (crash) via malformed ISAKMP packets.
Kame Racoon 2005-01-10Kame Racoon 2005-01-17Kame Racoon 2005-03-07Sgi Propack 3.0Kame Racoon 2004-04-05Kame Racoon 2004-04-07bKame Racoon 2005-02-07Kame Racoon 2005-02-14Ipsec-tools Ipsec-tools 0.3.3Ipsec-tools Ipsec-tools 0.5Kame Racoon 2003-07-11Kame Racoon 2005-01-24Kame Racoon 2005-01-31Kame Racoon 2004-05-03Kame Racoon 2005-01-03Kame Racoon 2005-02-21Kame Racoon 2005-02-28Redhat Enterprise Linux 4.0Suse Suse Linux 9.2Altlinux Alt Linux 2.3Redhat Enterprise Linux 3.0Suse Suse Linux
5
CVSSv2
CVE-2004-0392
racoon prior to 20040407b allows remote malicious users to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED"...
Kame Racoon
5
CVSSv2
CVE-2004-0403
Racoon prior to 20040408a allows remote malicious users to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.
Kame Racoon
5
CVSSv2
CVE-2004-0164
KAME IKE daemon (racoon) does not properly handle hash values, which allows remote malicious users to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handl...
Kame Racoon All Versions
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook