Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeS/WAN X.509证书验证漏洞
Vulnerability Description
IPSEC是一款IP安全扩展，提供IP通信验证和加密，Free/SWan是IPSEC在DEBIAN的实现。 FreeS/WAN存在证书验证问题，远程攻击者可以利用这个漏洞伪造证书进行欺骗，访问VPN服务器等。 当FreeS/WAN使用PKCS#7封装的X.509证书的IPSec连接时，FreeS/WAN可被欺骗对伪造证书进行验证。 如果攻击者构建一个CA证书，并且用户使用相同主题的证书，就可以被FreeS/WAN不正确地验证。利用这个漏洞，攻击者可以成功的通过FreeS/WAN VPN服务器验证。
CVSS Information
N/A
Vulnerability Type
N/A