10

CVE-2004-0590

EPSS 0.58%
Published 06.12.2004 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Frees Wan ≫ Frees Wan Version1

Frees Wan ≫ Frees Wan Version2

Frees Wan ≫ Super Frees Wan Version1

Openswan ≫ Openswan Version1

Openswan ≫ Openswan Version2

Strongswan ≫ Strongswan Version <= 2.1.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.58%	0.663

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://security.gentoo.org/glsa/glsa-200406-20.xml

Patch

Vendor Advisory

http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:070

Patch

Vendor Advisory

http://www.openswan.org/support/vuln/can-2004-0590/

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16515

https://nvd.nist.gov/vuln/detail/CVE-2004-0590

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0590

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0590

EUVD