NVD

Id
71034  
Name
CVE-2004-0607  
Description
The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-12-06  
Modified Date
2017-07-10  
Seq
2004-0607  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366787 71034 CVE-2004-0607 SCOSA-2005.10  View
366788 71034 CVE-2004-0607 20040614 authentication bug in KAME"s racoon  View
366789 71034 CVE-2004-0607 20040615 Re: authentication bug in KAME"s racoon  View
366790 71034 CVE-2004-0607 oval:org.mitre.oval:def:9163  View
366791 71034 CVE-2004-0607 GLSA-200406-17  View
366792 71034 CVE-2004-0607 1010495  View
366793 71034 CVE-2004-0607 http://sourceforge.net/project/shownotes.php?release_id=245982  View
366794 71034 CVE-2004-0607 RHSA-2004:308  View
366795 71034 CVE-2004-0607 10546  View
366796 71034 CVE-2004-0607 racoon-eaycheckx509cert-auth-bypass(16414)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62889 JVNDB-2004-000231 KAME racoon の eay_check_x509cert 機能における認証を回避される脆弱性 Ipsec-Tools に含まれている racoon には、eay_check_x509cert() 関数における verify callback の実装に不備があり、OpenSSL で証明書の認証が失敗しても、racoon では認証が成功したと返してしまう脆弱性が存在します。 CVE-2004-0607 9034 CVE-2004-0607 71034 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000231.html 2004-06-14 2007-04-01 View