| Package | Affected versions | Patched versions |
|---|---|---|
| openswan | = 2.6.25= 2.6.26= 2.6.27= 2.6.28 |
programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_domain_info data in a packet, a different vulnerability than CVE-2010-3302.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free