CVE-2004-0403

概要

参考情報

• ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt
• patches.sgi.com/support/free/security/advisories/20040506-01-U.asc
• marc.info
• secunia.com/advisories/11410
• secunia.com/advisories/11877
• security.gentoo.org/glsa/glsa-200404-17.xml
• securitytracker.com/id
• sourceforge.net/project/shownotes.php
• kame.net/dev/cvsweb2.cgi/kame/kame/kame/racoon/isakmp.c.diff · Exploit
• mandrakesecure.net/en/advisories/advisory.php
• osvdb.org/5491
• redhat.com/support/errata/RHSA-2004-165.html · Patch
• securityfocus.com/bid/10172
• vuxml.org/freebsd/ccd698df-8e20-11d8-90d1-0020ed76ef5a.html · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/15893
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11220
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A984

racoon のその他の脆弱性

• CVE-2005-0398中 5.0The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.
• CVE-2004-0607緊急 10.0The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remo…
• CVE-2004-0392中 5.0racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with…
• CVE-2004-0164中 5.0KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete…