PT-2004-1548 · Racoon · Racoon

Published 2004-04-16 · Updated 2017-10-11 · CVE-2004-0403

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Racoon versions prior to 20040408a

Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by sending an ISAKMP packet with a large length field.

Recommendations For versions prior to 20040408a, update to version 20040408a or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2004-0403

RHSA-2004:165

Affected Products

Racoon

References · 18

• 🔥 http://kame.net/dev/cvsweb2.cgi/kame/kame/kame/racoon/isakmp.c.diff?r1=1.180&r2=1.181 · Exploit
• http://redhat.com/support/errata/RHSA-2004-165.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200404-17.xml · Vendor Advisory
• http://mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0403 · Security Note
• http://marc.info/?l=bugtraq&m=108369640424244&w=2 · Vendor Advisory
• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20040506-01-U.asc · Vendor Advisory
• http://vuxml.org/freebsd/ccd698df-8e20-11d8-90d1-0020ed76ef5a.html · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11220 · Note
• http://securityfocus.com/bid/10172 · Note
• http://osvdb.org/5491 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15893 · Note
• http://secunia.com/advisories/11877 · Note
• http://sourceforge.net/project/shownotes.php?release_id=232288 · Note