CVE-2008-4190

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream version, this tool has been disabled.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:openswan:openswan:1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:openswan:openswan:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.3.1:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.04:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.05:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.12:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.13:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.4.5:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.4.9:*:*:*:*:*:*:*
cpe:2.3:a:openswan:openswan:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:openswan:openswan:2.1.6:*:*:*:*:*:*:*
cpe:2.3:a:openswan:openswan:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:openswan:openswan:2.3:*:*:*:*:*:*:*
cpe:2.3:a:openswan:openswan:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:openswan:openswan:2.2:*:*:*:*:*:*:*
cpe:2.3:a:openswan:openswan:2.1.5:*:*:*:*:*:*:*
cpe:2.3:a:openswan:openswan:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:openswan:openswan:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.4.3:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.4.4:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.4.8:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.4.10:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.4.11:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.4.12:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.03:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.08:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.09:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.10:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.11:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.16:*:*:*:*:*:*:*
cpe:2.3:a:openswan:openswan:1.0.8:*:*:*:*:*:*:*
cpe:2.3:a:openswan:openswan:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.4.6:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.4.7:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.06:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.07:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.14:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.15:*:*:*:*:*:*:*

Information

Published : 2008-09-24 04:42

Updated : 2019-07-29 07:24


NVD link : CVE-2008-4190

Mitre link : CVE-2008-4190


JSON object : View

CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')

Advertisement

dedicated server usa

Products Affected

xelerance

  • openswan

openswan

  • openswan