CVE-2004-0590
FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.83%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 2.83% probability · 86th percentile
- CISA KEV
- Not listed
- Affected
- frees wan/frees wan · frees wan/super frees wan · openswan/openswan · strongswan/strongswan
- Source
- cve@mitre.org
References
- http://security.gentoo.org/glsa/glsa-200406-20.xmlPatch, Vendor Advisory
- http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:070Patch, Vendor Advisory
- http://www.openswan.org/support/vuln/can-2004-0590/Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16515
- http://security.gentoo.org/glsa/glsa-200406-20.xmlPatch, Vendor Advisory
- http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:070Patch, Vendor Advisory
- http://www.openswan.org/support/vuln/can-2004-0590/Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16515
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.