10

CVE-2004-0590

EPSS 0.58%
Veröffentlicht 06.12.2004 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Frees Wan ≫ Frees Wan Version1

Frees Wan ≫ Frees Wan Version2

Frees Wan ≫ Super Frees Wan Version1

Openswan ≫ Openswan Version1

Openswan ≫ Openswan Version2

Strongswan ≫ Strongswan Version <= 2.1.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.58%	0.663

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://security.gentoo.org/glsa/glsa-200406-20.xml

Patch

Vendor Advisory

http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:070

Patch

Vendor Advisory

http://www.openswan.org/support/vuln/can-2004-0590/

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16515

https://nvd.nist.gov/vuln/detail/CVE-2004-0590

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0590

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0590

EUVD