Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 up to and including 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long cisco_banner (aka server_banner) field.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
xelerance openswan 2.6.26 |
||
xelerance openswan 2.6.27 |
||
xelerance openswan 2.6.28 |