Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

strongswan: code execution

Package(s):

strongswan

CVE #(s):

CVE-2010-2628

Created:

August 10, 2010

Updated:

August 17, 2010

Description:

From the openSUSE advisory:

Remote unauthenticated attackers could cause a buffer overflow in strongswan's IKE deamon by using specially crafted certificates or identify information. Attackers could potentially exploit that to execute code.

Alerts:

SUSE	SUSE-SR:2010:015	2010-08-17
openSUSE	openSUSE-SU-2010:0496-1	2010-08-10

(Log in to post comments)