Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 up to and including 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
xelerance openswan 2.6.25 |
||
xelerance openswan 2.6.26 |
||
xelerance openswan 2.6.27 |
||
xelerance openswan 2.6.28 |
Vulmon