PT-2008-2791 · Red Hat · Red Hat

Publicado 2008-03-06 · Atualizado 2022-02-03 · CVE-2008-1198

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux versions 3 through 5

Description The default IPSec ifup script configures racoon to use aggressive IKE mode instead of main IKE mode. This makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.

Recommendations For Red Hat Enterprise Linux versions 3 through 5, consider reconfiguring racoon to use main IKE mode instead of aggressive IKE mode to mitigate the risk of brute force attacks.

Exploit

Correção

Identificadores relacionados

CVE-2008-1198

RHSA-2012:0312

RHSA-2012_0312

Produtos afetados

Red Hat

Referências · 8

• 🔥 http://ernw.de/download/pskattack.pdf · Exploit
• https://access.redhat.com/security/cve/CVE-2008-1198 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=435274 · Nota
• http://securitytracker.com/id?1019563 · Nota
• https://access.redhat.com/errata/RHSA-2012:0312 · Nota
• http://secunia.com/advisories/48045 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41053 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1198 · Nota de Segurança