NVD

Id
38853  
Name
CVE-2013-2944  
Description
strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-05-02  
Modified Date
2013-12-05  
Seq
2013-2944  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
199244 38853 CVE-2013-2944 http://download.strongswan.org/patches/10_openssl_ecdsa_signature_patch/strongswan-4.3.5-5.0.3_openssl_ecdsa_signature.patch  View
199245 38853 CVE-2013-2944 openSUSE-SU-2013:0774  View
199246 38853 CVE-2013-2944 openSUSE-SU-2013:0873  View
199247 38853 CVE-2013-2944 openSUSE-SU-2013:0985  View
199248 38853 CVE-2013-2944 DSA-2665  View
199249 38853 CVE-2013-2944 59580  View
199250 38853 CVE-2013-2944 http://www.strongswan.org/blog/2013/04/30/strongswan-5.0.4-released-(cve-2013-2944).html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21007 JVNDB-2013-002582 strongSwan における他のユーザとして認証される脆弱性 strongSwan は、ECDSA 署名の検証に OpenSSL プラグインを使用する場合、他のユーザとして認証される脆弱性が存在します。 CVE-2013-2944 62886 CVE-2013-2944 38853 4.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002582.html 2013-04-30 2013-12-19 View