CVE-2004-0164 Missing authorization in n/a
Remote attackers can delete certificates in the KAME IKE daemon due to improper handling of hash values in delete and INITIAL-CONTACT messages.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-0164?
CVE-2004-0164 is a medium-severity missing authorization vulnerability in n/a, published on 19 Feb 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.
Which versions are affected by CVE-2004-0164?
It affects 1 product.
Products include Kame Racoon.
How do I fix CVE-2004-0164?
Apply the vendor's patch.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2004-0164 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-0164 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-2q54-wx6q-7cqc.