Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

racoon: improper certificate validation

Package(s):

racoon ipsec-utils

CVE #(s):

Created:

June 23, 2004

Updated:

June 23, 2004

Description:

The racoon tool found in ipsec-tools (through version 0.3.3) fails to perform proper authentication, enabling a potential man-in-the-middle attack.

Alerts:

Gentoo

2004-06-22

(Log in to post comments)