NVD

Id
49447  
Name
CVE-2009-2185  
Description
The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b) openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service (pluto IKE daemon crash) via an X.509 certificate with (1) crafted Relative Distinguished Names (RDNs), (2) a crafted UTCTIME string, or (3) a crafted GENERALIZEDTIME string.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-06-24  
Modified Date
2010-08-21  
Seq
2009-2185  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250088 49447 CVE-2009-2185 http://download.strongswan.org/CHANGES2.txt  View
250089 49447 CVE-2009-2185 http://download.strongswan.org/CHANGES4.txt  View
250090 49447 CVE-2009-2185 http://download.strongswan.org/CHANGES42.txt  View
250091 49447 CVE-2009-2185 oval:org.mitre.oval:def:11079  View
250092 49447 CVE-2009-2185 http://up2date.astaro.com/2009/07/up2date_7404_released.html  View
250093 49447 CVE-2009-2185 DSA-1898  View
250094 49447 CVE-2009-2185 DSA-1899  View
250095 49447 CVE-2009-2185 http://www.ingate.com/Relnote.php?ver=481  View
250096 49447 CVE-2009-2185 RHSA-2009:1138  View
250097 49447 CVE-2009-2185 35452  View
250098 49447 CVE-2009-2185 1022428  View
250099 49447 CVE-2009-2185 ADV-2009-1639  View
250100 49447 CVE-2009-2185 ADV-2009-1706  View
250101 49447 CVE-2009-2185 ADV-2009-1829  View
250102 49447 CVE-2009-2185 ADV-2009-3354  View
250103 49447 CVE-2009-2185 FEDORA-2009-7423  View
250104 49447 CVE-2009-2185 FEDORA-2009-7478  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40875 JVNDB-2009-001881 strongSwan および openSwan の ASN.1 パーサにおけるサービス運用妨害 (DoS) の脆弱性 strongSwan および openSwan の ASN.1 パーサには、X.509 証明書の処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-2185 39616 CVE-2009-2185 49447 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001881.html 2009-06-25 2009-08-14 View