PT-2008-2791 · Red Hat · Red Hat

Published 2008-03-06 · Updated 2022-02-03 · CVE-2008-1198

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux versions 3 through 5

Description The default IPSec ifup script configures racoon to use aggressive IKE mode instead of main IKE mode. This makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.

Recommendations For Red Hat Enterprise Linux versions 3 through 5, consider reconfiguring racoon to use main IKE mode instead of aggressive IKE mode to mitigate the risk of brute force attacks.

Exploit

Fix

Related Identifiers

CVE-2008-1198

RHSA-2012:0312

RHSA-2012_0312

Affected Products

Red Hat

References · 8

• 🔥 http://ernw.de/download/pskattack.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1198 · Security Note
• https://access.redhat.com/security/cve/CVE-2008-1198 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=435274 · Note
• http://securitytracker.com/id?1019563 · Note
• https://access.redhat.com/errata/RHSA-2012:0312 · Note
• http://secunia.com/advisories/48045 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41053 · Note