CVE-2004-0164: Medium severity KAME Racoon vulnerability
KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmpinf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmpinf.c.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0164?
The severity of CVE-2004-0164 is considered medium, as it can lead to the unauthorized deletion of certificates.
How do I fix CVE-2004-0164?
To fix CVE-2004-0164, it is recommended to update to the latest version of KAME racoon that addresses this vulnerability.
What systems are affected by CVE-2004-0164?
CVE-2004-0164 affects all versions of KAME racoon, which is used for VPN connections.
What types of attacks are possible with CVE-2004-0164?
CVE-2004-0164 allows remote attackers to delete certificates through improperly handled messages.
Is CVE-2004-0164 still a concern today?
While CVE-2004-0164 was reported in 2004, users of unsupported versions of KAME racoon may still be vulnerable unless they have mitigated the issue.