CVE-2004-0155 Auth bypass in n/a
Remote attackers can bypass authentication and conduct man-in-the-middle attacks by exploiting missing RSA signature verification in the Racoon IKE daemon.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-0155?
CVE-2004-0155 is a high-severity authentication bypass vulnerability in n/a, published on 16 Apr 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.
Which versions are affected by CVE-2004-0155?
It affects 1 product.
Products include Kame Racoon.
How do I fix CVE-2004-0155?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2004-0155 being exploited?
There is no known exploitation of CVE-2004-0155 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-m5jg-5w4m-4mhc.