CVE-2004-0164

KAME Racoon - 'Initial Contact' SA Deletion

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.

El demonio KAME IKE (racoon) no maneja adecuadamente valores de extractos (hash) lo que permite a atacantes remotos borrar certificados mediante (1) un cierto mensaje de borrado que no es manejado adecuadamente en isakmp.c o isakmp_inf.c, o (2) un cierto mensaje INITIAL-CONTACT que no es manejado adecuadamente en isakmp_inf.c.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2004-01-14 First Exploit
2004-02-18 CVE Reserved
2004-02-19 CVE Published
2024-07-30 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (13)

URL	Tag	Source
http://marc.info/?l=bugtraq&m=107403331309838&w=2	Mailing List
http://marc.info/?l=bugtraq&m=107411758202662&w=2	Mailing List
http://www.securityfocus.com/bid/9416	Vdb Entry
http://www.securityfocus.com/bid/9417	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/14117	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/14118	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A947	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9737	Signature

URL	Date	SRC
https://www.exploit-db.com/exploits/23540	2004-01-14

URL	Date	SRC

URL	Date	SRC
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-001.txt.asc	2017-10-11
http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html	2017-10-11
https://access.redhat.com/security/cve/CVE-2004-0164	2004-05-12
https://bugzilla.redhat.com/show_bug.cgi?id=1617164	2004-05-12

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Kame Search vendor "Kame"		Racoon Search vendor "Kame" for product "Racoon"				all_versions Search vendor "Kame" for product "Racoon" and version "all_versions"		-		Affected