Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.52362
Categoría:FreeBSD Local Security Checks
Título:FreeBSD Ports: racoon
Resumen:The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:Summary:
The remote host is missing an update to the system
as announced in the referenced advisory.

Vulnerability Insight:
The following package is affected: racoon

The installed version of racoon does not properly
check the validity of certificates, ignoring validation
failures from OpenSSL. This can be used by attackers to
bypass authentication restrictions.

This VT has been deprecated as a duplicate of the VT 'FreeBSD Ports: racoon' (OID: 1.3.6.1.4.1.25623.1.0.57147).

Solution:
Update your system with the appropriate patches or
software upgrades.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2004-0607
BugTraq ID: 10546
http://www.securityfocus.com/bid/10546
Bugtraq: 20040614 authentication bug in KAME's racoon (Google Search)
http://marc.info/?l=bugtraq&m=108726102304507&w=2
Bugtraq: 20040615 Re: authentication bug in KAME's racoon (Google Search)
http://marc.info/?l=bugtraq&m=108731967126033&w=2
http://security.gentoo.org/glsa/glsa-200406-17.xml
http://www.osvdb.org/7113
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9163
http://www.redhat.com/support/errata/RHSA-2004-308.html
SCO Security Bulletin: SCOSA-2005.10
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt
http://securitytracker.com/id?1010495
http://secunia.com/advisories/11863
http://secunia.com/advisories/11877
XForce ISS Database: racoon-eaycheckx509cert-auth-bypass(16414)
https://exchange.xforce.ibmcloud.com/vulnerabilities/16414
CopyrightCopyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.