CVE-2008-4190
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files.
Does this matter?
Lower severity and a low EPSS score (1.11%). Track it; it rarely justifies an emergency change on its own.
Description
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream version, this tool has been disabled.
- CVSS 2.0
- 4.4 MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.11% probability · 64th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-59
- Affected
- openswan/openswan · xelerance/openswan
- Source
- cve@mitre.org
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496374Patch
- http://dev.gentoo.org/~rbu/security/debiantemp/openswan
- http://secunia.com/advisories/34182Vendor Advisory
- http://secunia.com/advisories/34472Vendor Advisory
- http://www.debian.org/security/2009/dsa-1760Patch
- http://www.openwall.com/lists/oss-security/2008/10/30/2
- http://www.redhat.com/support/errata/RHSA-2009-0402.htmlPatch
- http://www.securityfocus.com/archive/1/501624/100/0/threaded
- http://www.securityfocus.com/archive/1/501640/100/0/threaded
- http://www.securityfocus.com/bid/31243Patch
- https://bugs.gentoo.org/show_bug.cgi?id=235770
- https://bugzilla.redhat.com/show_bug.cgi?id=460425
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45250
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10078
- https://www.exploit-db.com/exploits/9135
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496374Patch
- http://dev.gentoo.org/~rbu/security/debiantemp/openswan
- http://secunia.com/advisories/34182Vendor Advisory
- http://secunia.com/advisories/34472Vendor Advisory
- http://www.debian.org/security/2009/dsa-1760Patch
- http://www.openwall.com/lists/oss-security/2008/10/30/2
- http://www.redhat.com/support/errata/RHSA-2009-0402.htmlPatch
- http://www.securityfocus.com/archive/1/501624/100/0/threaded
- http://www.securityfocus.com/archive/1/501640/100/0/threaded
- http://www.securityfocus.com/bid/31243Patch
- https://bugs.gentoo.org/show_bug.cgi?id=235770
- https://bugzilla.redhat.com/show_bug.cgi?id=460425
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45250
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10078
- https://www.exploit-db.com/exploits/9135
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.