NVD

Id
48108  
Name
CVE-2009-0790  
Description
The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-04-01  
Modified Date
2010-08-21  
Seq
2009-0790  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241535 48108 CVE-2009-0790 http://download.strongswan.org/CHANGES4.txt  View
241536 48108 CVE-2009-0790 SUSE-SR:2009:009  View
241537 48108 CVE-2009-0790 oval:org.mitre.oval:def:11171  View
241538 48108 CVE-2009-0790 DSA-1759  View
241539 48108 CVE-2009-0790 DSA-1760  View
241540 48108 CVE-2009-0790 http://www.openswan.org/CVE-2009-0790/CVE-2009-0790.txt  View
241541 48108 CVE-2009-0790 RHSA-2009:0402  View
241542 48108 CVE-2009-0790 20090330 CVE-2009-0790: ISAKMP DPD Remote Vulnerability with Openswan & Strongswan IPsec  View
241543 48108 CVE-2009-0790 34296  View
241544 48108 CVE-2009-0790 1021949  View
241545 48108 CVE-2009-0790 1021950  View
241546 48108 CVE-2009-0790 ADV-2009-0886  View
241547 48108 CVE-2009-0790 openswan-strongswan-dpd-dos(49523)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40168 JVNDB-2009-001174 Openswan および Strongswan IPsec におけるサービス運用妨害 (DoS) の脆弱性 Openswan および Strongswan IPsec の pluto IKE デーモンには、R_U_THERE または R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification メッセージの処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-0790 38221 CVE-2009-0790 48108 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001174.html 2009-04-01 2009-04-24 View