CVE-2008-4190

EPSS 1.12%
Veröffentlicht 24.09.2008 11:42:25
Zuletzt bearbeitet 16.06.2026 22:57:20
Erkennungen
Login

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files.  NOTE: in many distributions and the upstream version, this tool has been disabled.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 18

NVD 31 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Openswan ≫ Openswan Version 1.0.4

   Openswan ≫ Openswan Version 1.0.4
   Openswan ≫ Openswan Version 1.0.4
   Openswan ≫ Openswan Version 1.0.4
   Openswan ≫ Openswan Version 1.0.4
   Openswan ≫ Openswan Version 1.0.4
   Openswan ≫ Openswan Version 1.0.4
   Openswan ≫ Openswan Version 1.0.4
   Openswan ≫ Openswan Version 1.0.4
   Openswan ≫ Openswan Version 1.0.4
   Openswan ≫ Openswan Version 1.0.4

Openswan ≫ Openswan Version 1.0.5

   Openswan ≫ Openswan Version 1.0.5
   Openswan ≫ Openswan Version 1.0.5
   Openswan ≫ Openswan Version 1.0.5
   Openswan ≫ Openswan Version 1.0.5
   Openswan ≫ Openswan Version 1.0.5
   Openswan ≫ Openswan Version 1.0.5
   Openswan ≫ Openswan Version 1.0.5
   Openswan ≫ Openswan Version 1.0.5
   Openswan ≫ Openswan Version 1.0.5
   Openswan ≫ Openswan Version 1.0.5

Openswan ≫ Openswan Version 1.0.6

   Openswan ≫ Openswan Version 1.0.6
   Openswan ≫ Openswan Version 1.0.6
   Openswan ≫ Openswan Version 1.0.6
   Openswan ≫ Openswan Version 1.0.6
   Openswan ≫ Openswan Version 1.0.6
   Openswan ≫ Openswan Version 1.0.6
   Openswan ≫ Openswan Version 1.0.6
   Openswan ≫ Openswan Version 1.0.6
   Openswan ≫ Openswan Version 1.0.6
   Openswan ≫ Openswan Version 1.0.6

Openswan ≫ Openswan Version 1.0.7

   Openswan ≫ Openswan Version 1.0.7
   Openswan ≫ Openswan Version 1.0.7
   Openswan ≫ Openswan Version 1.0.7
   Openswan ≫ Openswan Version 1.0.7
   Openswan ≫ Openswan Version 1.0.7
   Openswan ≫ Openswan Version 1.0.7
   Openswan ≫ Openswan Version 1.0.7
   Openswan ≫ Openswan Version 1.0.7
   Openswan ≫ Openswan Version 1.0.7
   Openswan ≫ Openswan Version 1.0.7

Openswan ≫ Openswan Version 1.0.8

   Openswan ≫ Openswan Version 1.0.8
   Openswan ≫ Openswan Version 1.0.8
   Openswan ≫ Openswan Version 1.0.8
   Openswan ≫ Openswan Version 1.0.8
   Openswan ≫ Openswan Version 1.0.8
   Openswan ≫ Openswan Version 1.0.8
   Openswan ≫ Openswan Version 1.0.8
   Openswan ≫ Openswan Version 1.0.8
   Openswan ≫ Openswan Version 1.0.8
   Openswan ≫ Openswan Version 1.0.8

Openswan ≫ Openswan Version 1.0.9

   Openswan ≫ Openswan Version 1.0.9
   Openswan ≫ Openswan Version 1.0.9
   Openswan ≫ Openswan Version 1.0.9
   Openswan ≫ Openswan Version 1.0.9
   Openswan ≫ Openswan Version 1.0.9
   Openswan ≫ Openswan Version 1.0.9
   Openswan ≫ Openswan Version 1.0.9
   Openswan ≫ Openswan Version 1.0.9
   Openswan ≫ Openswan Version 1.0.9
   Openswan ≫ Openswan Version 1.0.9

Openswan ≫ Openswan Version 2.1.1

   Openswan ≫ Openswan Version 2.1.1
   Openswan ≫ Openswan Version 2.1.1
   Openswan ≫ Openswan Version 2.1.1
   Openswan ≫ Openswan Version 2.1.1
   Openswan ≫ Openswan Version 2.1.1
   Openswan ≫ Openswan Version 2.1.1
   Openswan ≫ Openswan Version 2.1.1
   Openswan ≫ Openswan Version 2.1.1
   Openswan ≫ Openswan Version 2.1.1
   Openswan ≫ Openswan Version 2.1.1

Openswan ≫ Openswan Version 2.1.2

   Openswan ≫ Openswan Version 2.1.2
   Openswan ≫ Openswan Version 2.1.2
   Openswan ≫ Openswan Version 2.1.2
   Openswan ≫ Openswan Version 2.1.2
   Openswan ≫ Openswan Version 2.1.2
   Openswan ≫ Openswan Version 2.1.2
   Openswan ≫ Openswan Version 2.1.2
   Openswan ≫ Openswan Version 2.1.2
   Openswan ≫ Openswan Version 2.1.2
   Openswan ≫ Openswan Version 2.1.2

Openswan ≫ Openswan Version 2.1.4

   Openswan ≫ Openswan Version 2.1.4
   Openswan ≫ Openswan Version 2.1.4
   Openswan ≫ Openswan Version 2.1.4
   Openswan ≫ Openswan Version 2.1.4
   Openswan ≫ Openswan Version 2.1.4
   Openswan ≫ Openswan Version 2.1.4
   Openswan ≫ Openswan Version 2.1.4
   Openswan ≫ Openswan Version 2.1.4
   Openswan ≫ Openswan Version 2.1.4
   Openswan ≫ Openswan Version 2.1.4

Openswan ≫ Openswan Version 2.1.5

   Openswan ≫ Openswan Version 2.1.5
   Openswan ≫ Openswan Version 2.1.5
   Openswan ≫ Openswan Version 2.1.5
   Openswan ≫ Openswan Version 2.1.5
   Openswan ≫ Openswan Version 2.1.5
   Openswan ≫ Openswan Version 2.1.5
   Openswan ≫ Openswan Version 2.1.5
   Openswan ≫ Openswan Version 2.1.5
   Openswan ≫ Openswan Version 2.1.5
   Openswan ≫ Openswan Version 2.1.5

Openswan ≫ Openswan Version 2.1.6

   Openswan ≫ Openswan Version 2.1.6
   Openswan ≫ Openswan Version 2.1.6
   Openswan ≫ Openswan Version 2.1.6
   Openswan ≫ Openswan Version 2.1.6
   Openswan ≫ Openswan Version 2.1.6
   Openswan ≫ Openswan Version 2.1.6
   Openswan ≫ Openswan Version 2.1.6
   Openswan ≫ Openswan Version 2.1.6
   Openswan ≫ Openswan Version 2.1.6
   Openswan ≫ Openswan Version 2.1.6

Openswan ≫ Openswan Version 2.2

   Openswan ≫ Openswan Version 2.2
   Openswan ≫ Openswan Version 2.2
   Openswan ≫ Openswan Version 2.2
   Openswan ≫ Openswan Version 2.2
   Openswan ≫ Openswan Version 2.2
   Openswan ≫ Openswan Version 2.2
   Openswan ≫ Openswan Version 2.2
   Openswan ≫ Openswan Version 2.2
   Openswan ≫ Openswan Version 2.2
   Openswan ≫ Openswan Version 2.2

Openswan ≫ Openswan Version 2.3

   Openswan ≫ Openswan Version 2.3
   Openswan ≫ Openswan Version 2.3
   Openswan ≫ Openswan Version 2.3
   Openswan ≫ Openswan Version 2.3
   Openswan ≫ Openswan Version 2.3
   Openswan ≫ Openswan Version 2.3
   Openswan ≫ Openswan Version 2.3
   Openswan ≫ Openswan Version 2.3
   Openswan ≫ Openswan Version 2.3
   Openswan ≫ Openswan Version 2.3

Xelerance ≫ Openswan Version 2.3.1

   Xelerance ≫ Openswan Version 2.3.1
   Xelerance ≫ Openswan Version 2.3.1
   Xelerance ≫ Openswan Version 2.3.1
   Xelerance ≫ Openswan Version 2.3.1
   Xelerance ≫ Openswan Version 2.3.1
   Xelerance ≫ Openswan Version 2.3.1
   Xelerance ≫ Openswan Version 2.3.1
   Xelerance ≫ Openswan Version 2.3.1
   Xelerance ≫ Openswan Version 2.3.1
   Xelerance ≫ Openswan Version 2.3.1

Xelerance ≫ Openswan Version 2.4.0

   Xelerance ≫ Openswan Version 2.4.0
   Xelerance ≫ Openswan Version 2.4.0
   Xelerance ≫ Openswan Version 2.4.0
   Xelerance ≫ Openswan Version 2.4.0
   Xelerance ≫ Openswan Version 2.4.0
   Xelerance ≫ Openswan Version 2.4.0
   Xelerance ≫ Openswan Version 2.4.0
   Xelerance ≫ Openswan Version 2.4.0
   Xelerance ≫ Openswan Version 2.4.0
   Xelerance ≫ Openswan Version 2.4.0

Xelerance ≫ Openswan Version 2.4.2

   Xelerance ≫ Openswan Version 2.4.2
   Xelerance ≫ Openswan Version 2.4.2
   Xelerance ≫ Openswan Version 2.4.2
   Xelerance ≫ Openswan Version 2.4.2
   Xelerance ≫ Openswan Version 2.4.2
   Xelerance ≫ Openswan Version 2.4.2
   Xelerance ≫ Openswan Version 2.4.2
   Xelerance ≫ Openswan Version 2.4.2
   Xelerance ≫ Openswan Version 2.4.2
   Xelerance ≫ Openswan Version 2.4.2

Xelerance ≫ Openswan Version 2.4.4

   Xelerance ≫ Openswan Version 2.4.4
   Xelerance ≫ Openswan Version 2.4.4
   Xelerance ≫ Openswan Version 2.4.4
   Xelerance ≫ Openswan Version 2.4.4
   Xelerance ≫ Openswan Version 2.4.4
   Xelerance ≫ Openswan Version 2.4.4
   Xelerance ≫ Openswan Version 2.4.4
   Xelerance ≫ Openswan Version 2.4.4
   Xelerance ≫ Openswan Version 2.4.4
   Xelerance ≫ Openswan Version 2.4.4

Xelerance ≫ Openswan Version 2.6.03

   Xelerance ≫ Openswan Version 2.6.03
   Xelerance ≫ Openswan Version 2.6.03
   Xelerance ≫ Openswan Version 2.6.03
   Xelerance ≫ Openswan Version 2.6.03
   Xelerance ≫ Openswan Version 2.6.03
   Xelerance ≫ Openswan Version 2.6.03
   Xelerance ≫ Openswan Version 2.6.03
   Xelerance ≫ Openswan Version 2.6.03
   Xelerance ≫ Openswan Version 2.6.03
   Xelerance ≫ Openswan Version 2.6.03

Xelerance ≫ Openswan Version 2.6.04

   Xelerance ≫ Openswan Version 2.6.04
   Xelerance ≫ Openswan Version 2.6.04
   Xelerance ≫ Openswan Version 2.6.04
   Xelerance ≫ Openswan Version 2.6.04
   Xelerance ≫ Openswan Version 2.6.04
   Xelerance ≫ Openswan Version 2.6.04
   Xelerance ≫ Openswan Version 2.6.04
   Xelerance ≫ Openswan Version 2.6.04
   Xelerance ≫ Openswan Version 2.6.04
   Xelerance ≫ Openswan Version 2.6.04

Xelerance ≫ Openswan Version 2.6.05

   Xelerance ≫ Openswan Version 2.6.05
   Xelerance ≫ Openswan Version 2.6.05
   Xelerance ≫ Openswan Version 2.6.05
   Xelerance ≫ Openswan Version 2.6.05
   Xelerance ≫ Openswan Version 2.6.05
   Xelerance ≫ Openswan Version 2.6.05
   Xelerance ≫ Openswan Version 2.6.05
   Xelerance ≫ Openswan Version 2.6.05
   Xelerance ≫ Openswan Version 2.6.05
   Xelerance ≫ Openswan Version 2.6.05

Xelerance ≫ Openswan Version 2.6.06

   Xelerance ≫ Openswan Version 2.6.06
   Xelerance ≫ Openswan Version 2.6.06
   Xelerance ≫ Openswan Version 2.6.06
   Xelerance ≫ Openswan Version 2.6.06
   Xelerance ≫ Openswan Version 2.6.06
   Xelerance ≫ Openswan Version 2.6.06
   Xelerance ≫ Openswan Version 2.6.06
   Xelerance ≫ Openswan Version 2.6.06
   Xelerance ≫ Openswan Version 2.6.06
   Xelerance ≫ Openswan Version 2.6.06

Xelerance ≫ Openswan Version 2.6.07

   Xelerance ≫ Openswan Version 2.6.07
   Xelerance ≫ Openswan Version 2.6.07
   Xelerance ≫ Openswan Version 2.6.07
   Xelerance ≫ Openswan Version 2.6.07
   Xelerance ≫ Openswan Version 2.6.07
   Xelerance ≫ Openswan Version 2.6.07
   Xelerance ≫ Openswan Version 2.6.07
   Xelerance ≫ Openswan Version 2.6.07
   Xelerance ≫ Openswan Version 2.6.07
   Xelerance ≫ Openswan Version 2.6.07

Xelerance ≫ Openswan Version 2.6.08

   Xelerance ≫ Openswan Version 2.6.08
   Xelerance ≫ Openswan Version 2.6.08
   Xelerance ≫ Openswan Version 2.6.08
   Xelerance ≫ Openswan Version 2.6.08
   Xelerance ≫ Openswan Version 2.6.08
   Xelerance ≫ Openswan Version 2.6.08
   Xelerance ≫ Openswan Version 2.6.08
   Xelerance ≫ Openswan Version 2.6.08
   Xelerance ≫ Openswan Version 2.6.08
   Xelerance ≫ Openswan Version 2.6.08

Xelerance ≫ Openswan Version 2.6.09

   Xelerance ≫ Openswan Version 2.6.09
   Xelerance ≫ Openswan Version 2.6.09
   Xelerance ≫ Openswan Version 2.6.09
   Xelerance ≫ Openswan Version 2.6.09
   Xelerance ≫ Openswan Version 2.6.09
   Xelerance ≫ Openswan Version 2.6.09
   Xelerance ≫ Openswan Version 2.6.09
   Xelerance ≫ Openswan Version 2.6.09
   Xelerance ≫ Openswan Version 2.6.09
   Xelerance ≫ Openswan Version 2.6.09

Xelerance ≫ Openswan Version 2.6.10

   Xelerance ≫ Openswan Version 2.6.10
   Xelerance ≫ Openswan Version 2.6.10
   Xelerance ≫ Openswan Version 2.6.10
   Xelerance ≫ Openswan Version 2.6.10
   Xelerance ≫ Openswan Version 2.6.10
   Xelerance ≫ Openswan Version 2.6.10
   Xelerance ≫ Openswan Version 2.6.10
   Xelerance ≫ Openswan Version 2.6.10
   Xelerance ≫ Openswan Version 2.6.10
   Xelerance ≫ Openswan Version 2.6.10

Xelerance ≫ Openswan Version 2.6.11

   Xelerance ≫ Openswan Version 2.6.11
   Xelerance ≫ Openswan Version 2.6.11
   Xelerance ≫ Openswan Version 2.6.11
   Xelerance ≫ Openswan Version 2.6.11
   Xelerance ≫ Openswan Version 2.6.11
   Xelerance ≫ Openswan Version 2.6.11
   Xelerance ≫ Openswan Version 2.6.11
   Xelerance ≫ Openswan Version 2.6.11
   Xelerance ≫ Openswan Version 2.6.11
   Xelerance ≫ Openswan Version 2.6.11

Xelerance ≫ Openswan Version 2.6.12

   Xelerance ≫ Openswan Version 2.6.12
   Xelerance ≫ Openswan Version 2.6.12
   Xelerance ≫ Openswan Version 2.6.12
   Xelerance ≫ Openswan Version 2.6.12
   Xelerance ≫ Openswan Version 2.6.12
   Xelerance ≫ Openswan Version 2.6.12
   Xelerance ≫ Openswan Version 2.6.12
   Xelerance ≫ Openswan Version 2.6.12
   Xelerance ≫ Openswan Version 2.6.12
   Xelerance ≫ Openswan Version 2.6.12

Xelerance ≫ Openswan Version 2.6.13

   Xelerance ≫ Openswan Version 2.6.13
   Xelerance ≫ Openswan Version 2.6.13
   Xelerance ≫ Openswan Version 2.6.13
   Xelerance ≫ Openswan Version 2.6.13
   Xelerance ≫ Openswan Version 2.6.13
   Xelerance ≫ Openswan Version 2.6.13
   Xelerance ≫ Openswan Version 2.6.13
   Xelerance ≫ Openswan Version 2.6.13
   Xelerance ≫ Openswan Version 2.6.13
   Xelerance ≫ Openswan Version 2.6.13

Xelerance ≫ Openswan Version 2.6.14

   Xelerance ≫ Openswan Version 2.6.14
   Xelerance ≫ Openswan Version 2.6.14
   Xelerance ≫ Openswan Version 2.6.14
   Xelerance ≫ Openswan Version 2.6.14
   Xelerance ≫ Openswan Version 2.6.14
   Xelerance ≫ Openswan Version 2.6.14
   Xelerance ≫ Openswan Version 2.6.14
   Xelerance ≫ Openswan Version 2.6.14
   Xelerance ≫ Openswan Version 2.6.14
   Xelerance ≫ Openswan Version 2.6.14

Xelerance ≫ Openswan Version 2.6.15

   Xelerance ≫ Openswan Version 2.6.15
   Xelerance ≫ Openswan Version 2.6.15
   Xelerance ≫ Openswan Version 2.6.15
   Xelerance ≫ Openswan Version 2.6.15
   Xelerance ≫ Openswan Version 2.6.15
   Xelerance ≫ Openswan Version 2.6.15
   Xelerance ≫ Openswan Version 2.6.15
   Xelerance ≫ Openswan Version 2.6.15
   Xelerance ≫ Openswan Version 2.6.15
   Xelerance ≫ Openswan Version 2.6.15

Xelerance ≫ Openswan Version 2.6.16

   Xelerance ≫ Openswan Version 2.6.16
   Xelerance ≫ Openswan Version 2.6.16
   Xelerance ≫ Openswan Version 2.6.16
   Xelerance ≫ Openswan Version 2.6.16
   Xelerance ≫ Openswan Version 2.6.16
   Xelerance ≫ Openswan Version 2.6.16
   Xelerance ≫ Openswan Version 2.6.16
   Xelerance ≫ Openswan Version 2.6.16
   Xelerance ≫ Openswan Version 2.6.16
   Xelerance ≫ Openswan Version 2.6.16

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.12%	0.617

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.4	3.4	6.4	AV:L/AC:M/Au:N/C:P/I:P/A:P

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

http://www.openwall.com/lists/oss-security/2008/10/30/2

https://bugs.gentoo.org/show_bug.cgi?id=235770

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496374

Patch

http://dev.gentoo.org/~rbu/security/debiantemp/openswan

http://secunia.com/advisories/34182

Vendor Advisory

http://secunia.com/advisories/34472

Vendor Advisory

http://www.debian.org/security/2009/dsa-1760

Patch

http://www.redhat.com/support/errata/RHSA-2009-0402.html

Patch

http://www.securityfocus.com/archive/1/501624/100/0/threaded

http://www.securityfocus.com/archive/1/501640/100/0/threaded

http://www.securityfocus.com/bid/31243

Patch

https://bugzilla.redhat.com/show_bug.cgi?id=460425

https://exchange.xforce.ibmcloud.com/vulnerabilities/45250

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10078

https://www.exploit-db.com/exploits/9135

https://nvd.nist.gov/vuln/detail/CVE-2008-4190

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-4190

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-4190

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-4190