Red Hat Security Advisory

RHSA-2010:0892

openswan security update

Released 2010-11-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) openswan-2.6.24-8.el6_0.1
Red Hat Enterprise Linux Desktop Optional (v. 6) openswan-2.6.24-8.el6_0.1, openswan-doc-2.6.24-8.el6_0.1
Red Hat Enterprise Linux Server (v. 6) openswan-2.6.24-8.el6_0.1
Red Hat Enterprise Linux Server Optional (v. 6) openswan-2.6.24-8.el6_0.1, openswan-doc-2.6.24-8.el6_0.1
Red Hat Enterprise Linux Workstation (v. 6) openswan-2.6.24-8.el6_0.1
Red Hat Enterprise Linux Workstation Optional (v. 6) openswan-2.6.24-8.el6_0.1, openswan-doc-2.6.24-8.el6_0.1

Fixes 4 records

TI-2010-03162 CVE-2010-3308 · GHSA-j8v8-55qm-66h6

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28…

LOW 36

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long cisco_banner (aka serv…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04034 Published 2010-10-05 Fixed CWE-94

TI-2010-03156 CVE-2010-3302 · GHSA-fmrf-vrjc-f4q9

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28…

LOW 35

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03892 Published 2010-10-05 Fixed CWE-119

TI-2010-03564 CVE-2010-3752 · GHSA-46rf-hcw5-3qq2

programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote…

LOW 34

programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_domain_info data in a…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02465 Published 2010-10-05 Fixed CWE-78

TI-2010-03565 CVE-2010-3753 · GHSA-3gm4-7p8j-w2h8

programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote…

LOW 33

programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in the cisco_banner (aka server_banner) field, a differen…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02409 Published 2010-10-05 Fixed CWE-78