CVE-2004-0155: High severity KAME Racoon vulnerability
The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0155?
CVE-2004-0155 is classified as a serious vulnerability that can lead to unauthorized IP connections and man-in-the-middle attacks.
How do I fix CVE-2004-0155?
To fix CVE-2004-0155, update the KAME racoon software to the latest version that addresses this vulnerability.
What systems are affected by CVE-2004-0155?
CVE-2004-0155 affects the KAME racoon implementation, particularly in environments using X.509 certificate authentication.
What type of attacks can CVE-2004-0155 facilitate?
CVE-2004-0155 can facilitate unauthorized access and man-in-the-middle attacks due to improper RSA signature verification.
What is the cause of the vulnerability in CVE-2004-0155?
CVE-2004-0155 is caused by the failure of the KAME racoon daemon to properly verify RSA signature authentication during peer validation.