Strix
26.1K

CVE-2004-0607

UnknownEPSS 5.44%

Last modified

CVE-2004-0607 is a vulnerability of currently unknown severity. The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.. EPSS estimates a 5.44% chance of exploitation in the next 30 days.

Description

The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.

Metrics

EPSS Probability
5.44%

91.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
Ipsec-ToolsIpsec-Tools0.3
Ipsec-ToolsIpsec-Tools0.3.1
Ipsec-ToolsIpsec-Tools0.3.2
Ipsec-ToolsIpsec-Tools0.3_rc1
Ipsec-ToolsIpsec-Tools0.3_rc2
Ipsec-ToolsIpsec-Tools0.3_rc3
Ipsec-ToolsIpsec-Tools0.3_rc4
Ipsec-ToolsIpsec-Tools0.3_rc5
KameRacoonAll versions
KameRacoon2003-07-11
KameRacoon2004-04-05
KameRacoon2004-04-07b
KameRacoon2004-05-03
RedhatEnterprise Linux3.0
RedhatEnterprise Linux Desktop3.0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2004-0607?
The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.
How severe is CVE-2004-0607?
Severity scoring for CVE-2004-0607 is pending analysis. The EPSS model estimates a 5.44% probability of exploitation in the next 30 days.
How do I fix CVE-2004-0607?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2004-0607?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST