PT-2010-1066 · Red Hat · Openswan+1
Published
2010-10-05
·
Updated
2023-02-13
·
CVE-2010-3308
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Openswan versions 2.6.24 through 2.6.28
Description
The issue is related to a buffer overflow in the client, specifically in programs/pluto/xauth.c, which might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long
cisco banner (aka server banner) field. Multiple vulnerabilities in the Openswan package of Red Hat Enterprise Linux can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely by an authenticated attacker.Recommendations
For Openswan versions 2.6.24 through 2.6.28, update to a version that contains a fix for this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Buffer Overflow
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Openswan
Red Hat