CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-0607

The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.054

EPSS Ranking 91.7%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2004-0607

Ipsec-Tools » Ipsec-Tools » Version: 0.3

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3
Ipsec-Tools » Ipsec-Tools » Version: 0.3.1

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.1
Ipsec-Tools » Ipsec-Tools » Version: 0.3.2

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.2
Ipsec-Tools » Ipsec-Tools » Version: 0.3_rc1

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc1
Ipsec-Tools » Ipsec-Tools » Version: 0.3_rc2

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc2
Ipsec-Tools » Ipsec-Tools » Version: 0.3_rc3

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc3
Ipsec-Tools » Ipsec-Tools » Version: 0.3_rc4

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc4
Ipsec-Tools » Ipsec-Tools » Version: 0.3_rc5

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc5
Kame » Racoon » Version: Any

cpe:2.3:a:kame:racoon:*
Kame » Racoon » Version: 2003-07-11

cpe:2.3:a:kame:racoon:2003-07-11
Kame » Racoon » Version: 2004-04-05

cpe:2.3:a:kame:racoon:2004-04-05
Kame » Racoon » Version: 2004-04-07b

cpe:2.3:a:kame:racoon:2004-04-07b
Kame » Racoon » Version: 2004-05-03

cpe:2.3:a:kame:racoon:2004-05-03
Redhat » Enterprise Linux » Version: 3.0

cpe:2.3:o:redhat:enterprise_linux:3.0
Redhat » Enterprise Linux Desktop » Version: 3.0

cpe:2.3:o:redhat:enterprise_linux_desktop:3.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-0607

Products

Pricing

Contact Us