Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2009-1632 | First vendor Publication | 2009-05-14 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1632 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-399 | Resource Management Errors |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:10581 | |||
| Oval ID: | oval:org.mitre.oval:def:10581 | ||
| Title: | Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c. | ||
| Description: | Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2009-1632 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5 | Product(s): | |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:13740 | |||
| Oval ID: | oval:org.mitre.oval:def:13740 | ||
| Title: | DSA-1804-1 ipsec-tools -- null pointer dereference, memory leaks | ||
| Description: | Several remote vulnerabilities have been discovered in racoon, the Internet Key Exchange daemon of ipsec-tools. The The Common Vulnerabilities and Exposures project identified the following problems: Neil Kettle discovered a NULL pointer dereference on crafted fragmented packets that contain no payload. This results in the daemon crashing which can be used for denial of service attacks. Various memory leaks in the X.509 certificate authentication handling and the NAT-Traversal keepalive implementation can result in memory exhaustion and thus denial of service. For the oldstable distribution, this problem has been fixed in version 1:0.6.6-3.1etch3. For the stable distribution, this problem has been fixed in version 1:0.7.1-1.3+lenny2. For the testing distribution, this problem will be fixed soon. For the unstable distribution, this problem has been fixed in version 1:0.7.1-1.5. We recommend that you upgrade your ipsec-tools packages. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-1804-1 CVE-2009-1574 CVE-2009-1632 | Version: | 7 |
| Platform(s): | Debian GNU/Linux 5.0 Debian GNU/Linux 4.0 | Product(s): | ipsec-tools |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:13880 | |||
| Oval ID: | oval:org.mitre.oval:def:13880 | ||
| Title: | USN-785-1 -- ipsec-tools vulnerabilities | ||
| Description: | It was discovered that ipsec-tools did not properly handle certain fragmented packets. A remote attacker could send specially crafted packets to the server and cause a denial of service. It was discovered that ipsec-tools did not properly handle memory usage when verifying certificate signatures or processing nat-traversal keep-alive messages. A remote attacker could send specially crafted packets to the server and exhaust available memory, leading to a denial of service | ||
| Family: | unix | Class: | patch |
| Reference(s): | USN-785-1 CVE-2009-1574 CVE-2009-1632 | Version: | 5 |
| Platform(s): | Ubuntu 8.04 Ubuntu 9.04 Ubuntu 6.06 Ubuntu 8.10 | Product(s): | ipsec-tools |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:22832 | |||
| Oval ID: | oval:org.mitre.oval:def:22832 | ||
| Title: | ELSA-2009:1036: ipsec-tools security update (Important) | ||
| Description: | Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c. | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2009:1036-01 CVE-2009-1574 CVE-2009-1632 | Version: | 13 |
| Platform(s): | Oracle Linux 5 | Product(s): | ipsec-tools |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:28495 | |||
| Oval ID: | oval:org.mitre.oval:def:28495 | ||
| Title: | RHSA-2009:1036 -- ipsec-tools security update (Important) | ||
| Description: | An updated ipsec-tools package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the Linux kernel and includes racoon, an IKEv1 keying daemon. A denial of service flaw was found in the ipsec-tools racoon daemon. An unauthenticated, remote attacker could trigger a NULL pointer dereference that could cause the racoon daemon to crash. (CVE-2009-1574) | ||
| Family: | unix | Class: | patch |
| Reference(s): | RHSA-2009:1036 CESA-2009:1036-CentOS 5 CVE-2009-1574 CVE-2009-1632 | Version: | 3 |
| Platform(s): | Red Hat Enterprise Linux 5 CentOS Linux 5 | Product(s): | ipsec-tools |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:8051 | |||
| Oval ID: | oval:org.mitre.oval:def:8051 | ||
| Title: | DSA-1804 ipsec-tools -- null pointer dereference, memory leaks | ||
| Description: | Several remote vulnerabilities have been discovered in racoon, the Internet Key Exchange daemon of ipsec-tools. The The Common Vulnerabilities and Exposures project identified the following problems: Neil Kettle discovered a NULL pointer dereference on crafted fragmented packets that contain no payload. This results in the daemon crashing which can be used for denial of service attacks. Various memory leaks in the X.509 certificate authentication handling and the NAT-Traversal keepalive implementation can result in memory exhaustion and thus denial of service. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-1804 CVE-2009-1574 CVE-2009-1632 | Version: | 5 |
| Platform(s): | Debian GNU/Linux 5.0 Debian GNU/Linux 4.0 | Product(s): | ipsec-tools |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2011-08-09 | Name : CentOS Update for ipsec-tools CESA-2009:1036 centos5 i386 File : nvt/gb_CESA-2009_1036_ipsec-tools_centos5_i386.nasl |
| 2010-05-12 | Name : Mac OS X 10.6.2 Update / Mac OS X Security Update 2009-006 File : nvt/macosx_upd_10_6_2_secupd_2009-006.nasl |
| 2009-10-13 | Name : SLES10: Security update for ipsec-tools File : nvt/sles10_ipsec-tools.nasl |
| 2009-10-11 | Name : SLES11: Security update for ipsec-tools File : nvt/sles11_ipsec-tools.nasl |
| 2009-10-10 | Name : SLES9: Security update for ipsec-tools File : nvt/sles9p5052260.nasl |
| 2009-07-06 | Name : SuSE Security Summary SUSE-SR:2009:012 File : nvt/suse_sr_2009_012.nasl |
| 2009-06-15 | Name : Ubuntu USN-785-1 (ipsec-tools) File : nvt/ubuntu_785_1.nasl |
| 2009-06-05 | Name : Ubuntu USN-776-2 (kvm) File : nvt/ubuntu_776_2.nasl |
| 2009-05-25 | Name : Debian Security Advisory DSA 1804-1 (ipsec-tools) File : nvt/deb_1804_1.nasl |
| 2009-05-25 | Name : Gentoo Security Advisory GLSA 200905-03 (ipsec-tools) File : nvt/glsa_200905_03.nasl |
| 2009-05-25 | Name : Mandrake Security Advisory MDVSA-2009:114 (ipsec-tools) File : nvt/mdksa_2009_114.nasl |
| 2009-05-20 | Name : RedHat Security Advisory RHSA-2009:1036 File : nvt/RHSA_2009_1036.nasl |
| 2009-05-20 | Name : CentOS Security Advisory CESA-2009:1036 (ipsec-tools) File : nvt/ovcesa2009_1036.nasl |
| 2009-05-18 | Name : IPSec-Tools Memory Leakage Vulnerability File : nvt/secpod_ipsec-tools_memory_leakage_vuln.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 56401 | Ipsec-tools src/racoon/nattraversal.c NAT-Traversal (aka NAT-T) Keepalive Imp... |
| 56400 | Ipsec-tools src/racoon/crypto_openssl.c eay_check_x509sign Function Signature... |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2014-11-26 | Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2009-0010.nasl - Type : ACT_GATHER_INFO |
| 2013-07-12 | Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2009-1036.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing a security update. File : sl_20090518_ipsec_tools_on_SL5_x.nasl - Type : ACT_GATHER_INFO |
| 2011-01-27 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_novell-ipsec-tools-6306.nasl - Type : ACT_GATHER_INFO |
| 2010-01-06 | Name : The remote CentOS host is missing a security update. File : centos_RHSA-2009-1036.nasl - Type : ACT_GATHER_INFO |
| 2009-11-09 | Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_10_6_2.nasl - Type : ACT_GATHER_INFO |
| 2009-11-09 | Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_SecUpd2009-006.nasl - Type : ACT_GATHER_INFO |
| 2009-10-06 | Name : The remote openSUSE host is missing a security update. File : suse_novell-ipsec-tools-6307.nasl - Type : ACT_GATHER_INFO |
| 2009-09-24 | Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12438.nasl - Type : ACT_GATHER_INFO |
| 2009-09-24 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_ipsec-tools-6301.nasl - Type : ACT_GATHER_INFO |
| 2009-09-24 | Name : The remote SuSE 11 host is missing a security update. File : suse_11_novell-ipsec-tools-090616.nasl - Type : ACT_GATHER_INFO |
| 2009-09-24 | Name : The remote SuSE 11 host is missing a security update. File : suse_11_ipsec-tools-090613.nasl - Type : ACT_GATHER_INFO |
| 2009-07-21 | Name : The remote openSUSE host is missing a security update. File : suse_11_0_novell-ipsec-tools-090616.nasl - Type : ACT_GATHER_INFO |
| 2009-07-21 | Name : The remote openSUSE host is missing a security update. File : suse_11_1_novell-ipsec-tools-090616.nasl - Type : ACT_GATHER_INFO |
| 2009-07-21 | Name : The remote openSUSE host is missing a security update. File : suse_11_1_ipsec-tools-090613.nasl - Type : ACT_GATHER_INFO |
| 2009-07-21 | Name : The remote openSUSE host is missing a security update. File : suse_11_0_ipsec-tools-090613.nasl - Type : ACT_GATHER_INFO |
| 2009-06-25 | Name : The remote openSUSE host is missing a security update. File : suse_ipsec-tools-6302.nasl - Type : ACT_GATHER_INFO |
| 2009-06-10 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-785-1.nasl - Type : ACT_GATHER_INFO |
| 2009-05-26 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200905-03.nasl - Type : ACT_GATHER_INFO |
| 2009-05-22 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1804.nasl - Type : ACT_GATHER_INFO |
| 2009-05-19 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2009-1036.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:11:20 |
|
| 2024-11-28 12:18:56 |
|
| 2021-05-04 12:09:32 |
|
| 2021-04-22 01:09:53 |
|
| 2020-05-23 01:40:23 |
|
| 2020-05-23 00:23:45 |
|
| 2017-09-29 09:24:13 |
|
| 2016-12-08 09:23:23 |
|
| 2016-04-26 18:49:16 |
|
| 2014-11-27 13:27:31 |
|
| 2014-02-17 10:50:00 |
|
| 2013-05-10 23:50:14 |
|
