OP
Product
Openswan
5
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Openswan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-2147 | – | May 20 | Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to starter.c in the IPsec starter, and (2) /var/lock/subsys/ipsec, which allows local… Affected: 2.2.0; 2.2.1 |
| CVE-2008-4190 | – | Sep 24 | The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack… Affected: 1.0.4; 1.0.5; 1.0.6; 1.0.7; 1.0.8; 1.0.9; +7 more |
| CVE-2005-3671 | – | Nov 18 | The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers… Affected: 2.1.1; 2.1.2; 2.1.4; 2.1.5; 2.1.6; 2.2; +1 more |
| CVE-2005-0162 | – | Jan 26 | Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH… Affected: through 1.0.9 |
| CVE-2004-0590 | – | Dec 6 | FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote… Affected: 1; 2 |
Showing 5