Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Racoon IKE守护程序未授权X.509证书连接漏洞
Vulnerability Description
racoon IKE守护程序是一款IKE协议实现。 racoon IKE守护程序存在安全问题,远程攻击者可以利用这个漏洞利用合法X.509证书不需要提供相应正确的私钥进行未授权VPN访问。 Linux 2.6内核包含的racoon守护程序和KAME's IPsec工具受此漏洞影响,目前没有详细漏洞细节提供。
CVSS Information
N/A
Vulnerability Type
N/A