CVE-2008-4190

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream version, this tool has been disabled.

• CWE-59

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496374Patch
• http://dev.gentoo.org/~rbu/security/debiantemp/openswan
• http://secunia.com/advisories/34182Vendor Advisory
• http://secunia.com/advisories/34472Vendor Advisory
• http://www.debian.org/security/2009/dsa-1760Patch
• http://www.openwall.com/lists/oss-security/2008/10/30/2
• http://www.redhat.com/support/errata/RHSA-2009-0402.htmlPatch
• http://www.securityfocus.com/archive/1/501624/100/0/threaded
• http://www.securityfocus.com/archive/1/501640/100/0/threaded
• http://www.securityfocus.com/bid/31243Patch
• https://bugs.gentoo.org/show_bug.cgi?id=235770
• https://bugzilla.redhat.com/show_bug.cgi?id=460425
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45250
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10078
• https://www.exploit-db.com/exploits/9135
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496374Patch
• http://dev.gentoo.org/~rbu/security/debiantemp/openswan
• http://secunia.com/advisories/34182Vendor Advisory
• http://secunia.com/advisories/34472Vendor Advisory
• http://www.debian.org/security/2009/dsa-1760Patch
• http://www.openwall.com/lists/oss-security/2008/10/30/2
• http://www.redhat.com/support/errata/RHSA-2009-0402.htmlPatch
• http://www.securityfocus.com/archive/1/501624/100/0/threaded
• http://www.securityfocus.com/archive/1/501640/100/0/threaded
• http://www.securityfocus.com/bid/31243Patch
• https://bugs.gentoo.org/show_bug.cgi?id=235770
• https://bugzilla.redhat.com/show_bug.cgi?id=460425
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45250
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10078
• https://www.exploit-db.com/exploits/9135

Published

Sep 24, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4184Cross-site scripting (XSS) vulnerability in index.php in web…
• CVE-2008-4185SQL injection vulnerability in index.php in webCMS Portal Ed…
• CVE-2008-4186SQL injection vulnerability in index.php in webCMS Portal Ed…
• CVE-2008-4187Directory traversal vulnerability in index.php in ProActive …
• CVE-2008-4188Unspecified vulnerability in the TYPO3 Secure Directory (kw_…
• CVE-2008-4189Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2008-4191extract-table.pl in Emacspeak 26 and 28 allows local users t…
• CVE-2008-4192The pserver_shutdown function in fence_egenera in cman 2.200…
• CVE-2008-4193Stack-based buffer overflow in SecurityGateway.dll in Alt-N …
• CVE-2008-4194The p_exec_query function in src/dns_query.c in pdnsd before…
• CVE-2008-4195Opera before 9.52 does not properly restrict the ability of …
• CVE-2008-4196Cross-site scripting (XSS) vulnerability in Opera before 9.5…