CVE-2012-2388: High severity strongswan vulnerability
Published Jun 27, 2012
·Updated
The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability."
Affected Software
34 affected components
strongSwan Strongswan=4.2.0
strongSwan Strongswan=4.2.1
strongSwan Strongswan=4.2.2
strongSwan Strongswan=4.2.3
strongSwan Strongswan=4.2.4
strongSwan Strongswan=4.2.5
strongSwan Strongswan=4.2.6
strongSwan Strongswan=4.2.7
strongSwan Strongswan=4.2.8
strongSwan Strongswan=4.2.9
strongSwan Strongswan=4.2.10
strongSwan Strongswan=4.2.11
strongSwan Strongswan=4.2.12
strongSwan Strongswan=4.2.13
strongSwan Strongswan=4.2.14
strongSwan Strongswan=4.2.15
strongSwan Strongswan=4.2.16
strongSwan Strongswan=4.3.0
strongSwan Strongswan=4.3.1
strongSwan Strongswan=4.3.2
strongSwan Strongswan=4.3.3
strongSwan Strongswan=4.3.4
strongSwan Strongswan=4.3.5
strongSwan Strongswan=4.3.6
strongSwan Strongswan=4.4.0
strongSwan Strongswan=4.4.1
strongSwan Strongswan=4.5.0
strongSwan Strongswan=4.5.1
strongSwan Strongswan=4.5.2
strongSwan Strongswan=4.5.3
strongSwan Strongswan=4.6.0
strongSwan Strongswan=4.6.1
strongSwan Strongswan=4.6.2
strongSwan Strongswan=4.6.3
Event History
Jun 27, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2388?
CVE-2012-2388 is considered to have a moderate severity due to the potential for authentication bypass in affected versions.
2
How do I fix CVE-2012-2388?
To fix CVE-2012-2388, upgrade strongSwan to version 4.6.4 or later to mitigate the vulnerability.
3
What versions of strongSwan are affected by CVE-2012-2388?
CVE-2012-2388 affects strongSwan versions 4.2.0 through 4.6.3.
4
What does CVE-2012-2388 allow an attacker to do?
CVE-2012-2388 allows remote attackers to bypass authentication using an empty or zeroed RSA signature.
5
Is CVE-2012-2388 a local or remote vulnerability?
CVE-2012-2388 is a remote vulnerability that can be exploited by attackers over the network.