CVE-2013-2944 Auth bypass in n/a

What is CVE-2013-2944?

CVE-2013-2944 is a medium-severity authentication bypass vulnerability in n/a, published on 2 May 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature.

Weakness: CWE-287

Which versions are affected by CVE-2013-2944?

It affects 1 product.

Products include Strongswan Strongswan.

How do I fix CVE-2013-2944?

Upgrade to a fixed version.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2013-2944 being exploited?

There is no known exploitation of CVE-2013-2944 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2023-41913 Memory corruption in n/a Critical 9.8
• CVE-2023-26463 Use after free in n/a Critical 9.8
• CVE-2015-3991 Memory corruption in n/a Critical 9.8
• CVE-2022-4967 Auth bypass in strongSwan High 7.7
• CVE-2026-78130 Null dereference in strongSwan High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2013-2944, DSA-2665-1, GHSA-m484-f74p-8pvx.