QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-0155

Back to search

CVE-2004-0155

Published: Apr 16, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.

VendorProductVersions

n/a

n/a

affected
n/a

References

MDKSA-2004:027
vendor-advisory
x_refsource_MANDRAKE
MDKSA-2004:069
vendor-advisory
x_refsource_MANDRAKE
APPLE-SA-2004-05-03
vendor-advisory
x_refsource_APPLE
oval:org.mitre.oval:def:9291
vdb-entry
signature
x_refsource_OVAL
GLSA-200406-17
vendor-advisory
x_refsource_GENTOO
oval:org.mitre.oval:def:945
vdb-entry
signature
x_refsource_OVAL
11328
third-party-advisory
x_refsource_SECUNIA
VU#552398
third-party-advisory
x_refsource_CERT-VN
RHSA-2004:165
vendor-advisory
x_refsource_REDHAT
10072
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now