CVE-2004-0607
Fixed in a distro release EPSS 5%
The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.
Products: ipsec-tools, kame racoon, redhat enterprise_linux, redhat enterprise_linux_desktop
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | ipsec-tools | 0:0.2.5-0.5 |
| Red Hat Enterprise Linux 3 | ipsec-tools-debuginfo | 0:0.2.5-0.5 |