SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2004-0607

The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 10.0
Exploit Score: 10.0
Impact Score: 10.0

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Reference:

http://marc.info/?l=bugtraq&m=108726102304507&w=2

http://marc.info/?l=bugtraq&m=108731967126033&w=2

http://sourceforge.net/project/shownotes.php?release_id=245982

oval:org.mitre.oval:def:9163

racoon-eaycheckx509cert-auth-bypass(16414)


30481



423868



256040



909



199103



282