NVD

Id
1158  
Name
CVE-2008-1198  
Description
The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-03-06  
Modified Date
2008-09-05  
Seq
2008-1198  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
7259 1158 CVE-2008-1198 http://www.ernw.de/download/pskattack.pdf  View
7260 1158 CVE-2008-1198 1019563  View
7261 1158 CVE-2008-1198 ipsec-ifup-weak-security(41053)  View
7262 1158 CVE-2008-1198 https://bugzilla.redhat.com/show_bug.cgi?id=435274  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50240 JVNDB-2008-005550 Red Hat Enterprise Linux のデフォルト IPSec ifup スクリプトにおける総当り攻撃を実行される脆弱性 Red Hat Enterprise Linux のデフォルト IPSec ifup スクリプトは、racoon を設定してメイン IKE モードの代わりにアグレッシブ IKE モードを使用するため、総当り攻撃を実行される脆弱性が存在します。 CVE-2008-1198 31311 CVE-2008-1198 1158 7.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005550.html 2008-02-28 2012-12-20 View