Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Gentoo: GLSA-200406-17 Critical: Racoon Authentication Flaw

gentoo
Calendar Grey June 22, 2004
Scroller Gentoo
Improve IPsec-Tools' racoon security by addressing vulnerabilities in IKE negotiation, enhancing peer identity verification and implementing robust protective measures
racoon provided as part of IPsec-Tools fails do proper authentication.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200406-17
                                            https://security.gentoo.org/

  Severity: Normal
     Title: IPsec-Tools: authentication bug in racoon
      Date: June 22, 2004
      Bugs: #53915
        ID: 200406-17


Synopsis
=======
racoon provided as part of IPsec-Tools fails do proper authentication.

Background
=========
IPsec-Tools is a port of KAME's implementation of the IPsec utilities.
It contains a collection of network monitoring tools, including racoon,
ping, and ping6.

Affected packages
================
    -------------------------------------------------------------------
     Package                   /   Vulnerable   /           Unaffected
    -------------------------------------------------------------------
  1  net-firewall/ipsec-tools        < 0.3.3                  >= 0.3.3

==========
The KAME IKE daemon racoon is used to authenticate peers du...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo network monitoring ipsec-tools man-in-the-middle attack authentication flaw

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory gentoo network monitoring ipsec-tools man-in-the-middle attack authentication flaw

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround