NVD

Id
70612  
Name
CVE-2004-0155  
Description
The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2004-06-01  
Modified Date
2016-10-17  
Seq
2004-0155  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
364103 70612 CVE-2004-0155 SCOSA-2005.10  View
364104 70612 CVE-2004-0155 20040407 CAN-2004-0155: The KAME IKE Daemon Racoon does not verify RSA Signatures during Phase 1, allows man-in-the-middle attacks and unauthorized connections  View
364105 70612 CVE-2004-0155 APPLE-SA-2004-05-03  View
364106 70612 CVE-2004-0155 oval:org.mitre.oval:def:9291  View
364107 70612 CVE-2004-0155 oval:org.mitre.oval:def:945  View
364108 70612 CVE-2004-0155 GLSA-200406-17  View
364109 70612 CVE-2004-0155 VU#552398  View
364110 70612 CVE-2004-0155 MDKSA-2004:069  View
364111 70612 CVE-2004-0155 MDKSA-2004:027  View
364112 70612 CVE-2004-0155 RHSA-2004:165  View
364113 70612 CVE-2004-0155 10072  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62770 JVNDB-2004-000111 IPsec-Tools の racoon における RSA の署名が正しく検証されない脆弱性 Ipsec-Tools に含まれている racoon には、crypto_openssl.c における RSA 署名の検証に不備があり、暗号化形式として RSA 署名を選択した場合に RSA 署名を常に信頼してしまい、結果として X.509 証明書のみによる認証を行なってしまう脆弱性が存在します。 CVE-2004-0155 8582 CVE-2004-0155 70612 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000111.html 2004-04-07 2007-04-01 View