Unscored severity · published Sep 24, 2008
CVE-2008-4190
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack…
–
CVSS
1.1%
EPSS
No
On KEV
Description
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream version, this tool has been disabled.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openswan · Openswan
1.0.4; 1.0.5; 1.0.6; 1.0.7; 1.0.8; 1.0.9; +7 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4190
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4190
Patch
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496374
dev.gentoo.org
http://dev.gentoo.org/~rbu/security/debiantemp/openswan
Vendor Advisory
http://secunia.com/advisories/34182
Vendor Advisory
http://secunia.com/advisories/34472
Patch
http://www.debian.org/security/2009/dsa-1760
www.openwall.com
http://www.openwall.com/lists/oss-security/2008/10/30/2
More from Openswan
–
CVE-2011-2147
Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to starter.c in the IPsec starter, and (2) /var/lock/subsys/ipsec, which allows local…
–
CVE-2005-3671
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers…
–
CVE-2005-0162
Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH…
–
CVE-2004-0590
FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote…