Red Hat Security AdvisoryRHSA-2009:0402
openswan security update
Released 2009-03-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) openswan-2.6.14-1.el5_3.2, openswan-2.6.14-1.el5_3.2.i386, openswan-2.6.14-1.el5_3.2.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) openswan-2.6.14-1.el5_3.2, openswan-2.6.14-1.el5_3.2.i386, openswan-doc-2.6.14-1.el5_3.2 +1
Fixes 2 records
Priority LOW 29
The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03205 · Published 2009-04-01 · Fixed CWE-20
Priority LOW 23
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.ol…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.01115 · Published 2008-09-24 · Fixed CWE-59
