CVE ID:	CVE-2004-0607
Description:	The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.
Test IDs:	1.3.6.1.4.1.25623.1.0.51110   1.3.6.1.4.1.25623.1.0.57147   1.3.6.1.4.1.25623.1.0.52362
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0607 BugTraq ID: 10546 http://www.securityfocus.com/bid/10546 Bugtraq: 20040614 authentication bug in KAME's racoon (Google Search) http://marc.info/?l=bugtraq&m=108726102304507&w=2 Bugtraq: 20040615 Re: authentication bug in KAME's racoon (Google Search) http://marc.info/?l=bugtraq&m=108731967126033&w=2 http://security.gentoo.org/glsa/glsa-200406-17.xml http://www.osvdb.org/7113 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9163 RedHat Security Advisories: RHSA-2004:308 http://www.redhat.com/support/errata/RHSA-2004-308.html SCO Security Bulletin: SCOSA-2005.10 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt http://securitytracker.com/id?1010495 http://secunia.com/advisories/11863 http://secunia.com/advisories/11877 XForce ISS Database: racoon-eaycheckx509cert-auth-bypass(16414) https://exchange.xforce.ibmcloud.com/vulnerabilities/16414