NVD

Id
71017  
Name
CVE-2004-0590  
Description
FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-12-06  
Modified Date
2017-07-10  
Seq
2004-0590  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366600 71017 CVE-2004-0590 GLSA-200406-20  View
366601 71017 CVE-2004-0590 MDKSA-2004:070  View
366602 71017 CVE-2004-0590 http://www.openswan.org/support/vuln/can-2004-0590/  View
366603 71017 CVE-2004-0590 ipsec-verifyx509cert-auth-bypass(16515)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62900 JVNDB-2004-000242 FreeS/WAN 用拡張パッチの verify_x509cert() 関数における証明書を偽装される脆弱性 FreeS/WAN 用 X.509 拡張パッチ には、証明書の妥当性をチェックする verify_x509cert() 関数の不備のため、 PKCS#7 形式の証明書の処理が適切に行われない脆弱性が存在します。 CVE-2004-0590 9017 CVE-2004-0590 71017 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000242.html 2004-06-25 2007-04-01 View