RA
Product
Racoon
6
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Racoon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-0398 | – | Mar 14 | The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets Affected: 2003-07-11; 2004-04-05; 2004-04-07b; 2004-05-03; 2005-01-03; 2005-01-10; +8 more |
| CVE-2004-0607 | – | Dec 6 | The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication Affected: 2003-07-11; 2004-04-05; 2004-04-07b; 2004-05-03 |
| CVE-2004-0392 | – | Jun 14 | racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header… Affected: through 2004-04-07a |
| CVE-2004-0155 | – | Jun 1 | The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote… Affected: All versions, or not specified |
| CVE-2004-0403 | – | Jun 1 | Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field Affected: through 2004-04-08a |
| CVE-2004-0164 | – | Mar 3 | KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled… Affected: all_versions |
Showing 6
