CVE-2012-2388

The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability."

• CWE-287

• http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00002.html
• http://osvdb.org/82587
• http://secunia.com/advisories/49315Vendor Advisory
• http://secunia.com/advisories/49336Vendor Advisory
• http://secunia.com/advisories/49370Vendor Advisory
• http://secunia.com/advisories/55051
• http://www.debian.org/security/2012/dsa-2483
• http://www.securityfocus.com/bid/53752
• http://www.securitytracker.com/id?1027110
• http://www.strongswan.org/blog/2012/05/31/strongswan-4.6.4-released-%28cve-2012-2388%29.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76013
• http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00002.html
• http://osvdb.org/82587
• http://secunia.com/advisories/49315Vendor Advisory
• http://secunia.com/advisories/49336Vendor Advisory
• http://secunia.com/advisories/49370Vendor Advisory
• http://secunia.com/advisories/55051
• http://www.debian.org/security/2012/dsa-2483
• http://www.securityfocus.com/bid/53752
• http://www.securitytracker.com/id?1027110
• http://www.strongswan.org/blog/2012/05/31/strongswan-4.6.4-released-%28cve-2012-2388%29.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76013

Published

Jun 27, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2382Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2012-2383Integer overflow in the i915_gem_execbuffer2 function in dri…
• CVE-2012-2384Integer overflow in the i915_gem_do_execbuffer function in d…
• CVE-2012-2385The terminal dispatcher in mosh before 1.2.1 allows remote a…
• CVE-2012-2386Integer overflow in the phar_parse_tarfile function in tar.c…
• CVE-2012-2387devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit…
• CVE-2012-2389hostapd 0.7.3, and possibly other versions before 1.0, uses …
• CVE-2012-2390Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2…
• CVE-2012-2391Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2012-2392Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows …
• CVE-2012-2393epan/dissectors/packet-diameter.c in the DIAMETER dissector …
• CVE-2012-2394Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the …