PT-2005-1260 · Openswan · Openswan

Published 2005-01-26 · Updated 2019-07-29 · CVE-2005-0162

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Openswan versions 1.x prior to 1.0.9 Openswan versions 2.x prior to 2.3.0

Description A stack-based buffer overflow issue exists in the get internal addresses function of the pluto application for Openswan, when compiled with XAUTH and PAM enabled. This allows remote authenticated attackers to execute arbitrary code.

Recommendations For Openswan versions 1.x prior to 1.0.9, update to version 1.0.9 or later. For Openswan versions 2.x prior to 2.3.0, update to version 2.3.0 or later.

Fix

Related Identifiers

CVE-2005-0162

Affected Products

Openswan

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2005-0162 · Security Note
• http://openswan.org/support/vuln/IDEF0785 · Vendor Advisory
• http://redhat.com/archives/fedora-announce-list/2005-January/msg00103.html · Vendor Advisory
• http://idefense.com/application/poi/display?id=190&type=vulnerabilities · Vendor Advisory
• http://osvdb.org/13195 · Note
• http://secunia.com/advisories/14062 · Note
• http://securityfocus.com/bid/12377 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19078 · Note
• http://securitytracker.com/id?1013014 · Note
• http://secunia.com/advisories/14038 · Note