Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xelerance OpenSwan 安全漏洞
Vulnerability Description
Xelerance OpenSwan是加拿大Xelerance公司的一个基于FreeS/WAN项目的用于Linux系统下的IPSEC实现，它主要用于保证数据传输中的安全性、完整性等问题。 Xelerance OpenSwan 1.0.9之前的1.x版本和2.3.0之前的2.x版本的‘get_internal_addresses’函数存在安全漏洞。 当Openswan以支持XAUTH和PAM编译时，远程经认证的攻击者可利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A