GCVE - cpe:2.3:a:kame:racoon:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kame:racoon:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Kame (`13defdcd-2616-50dc-b08c-48d2b4ebcbc8`)
Product	Racoon (`1d8cf52e-03c3-5f02-ac7d-4530da407734`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/zoulasc/racoon2`	purl2cpe	2026-06-01 10:17:49.839083
`pkg:rpm/fedora/racoon2`	purl2cpe	2026-06-01 10:17:49.839085

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2004-0607`	vulnerable	2026-06-08 04:47:50.528658	Details available The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication. Published: 2004-06-30T04:00:00.000Z Updated: 2024-08-08T00:24:26.577Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=108731967126033&w=2 http://sourceforge.net/project/shownotes.php?release_id=245982 http://www.osvdb.org/7113 http://secunia.com/advisories/11877 http://marc.info/?l=bugtraq&m=108726102304507&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0403`	vulnerable	2026-06-08 04:47:49.705493	Details available Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field. Published: 2004-04-16T04:00:00.000Z Updated: 2024-08-08T00:17:14.610Z Open on db.gcve.eu Reference links http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A984 http://securitytracker.com/id?1009937 http://www.vuxml.org/freebsd/ccd698df-8e20-11d8-90d1-0020ed76ef5a.html ftp://patches.sgi.com/support/free/security/advisories/20040506-01-U.asc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0392`	vulnerable	2026-06-08 04:47:49.674446	Details available racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields. Published: 2004-05-06T04:00:00.000Z Updated: 2024-08-08T00:17:14.413Z Open on db.gcve.eu Reference links http://www.vuxml.org/freebsd/40fcf20f-8891-11d8-90d1-0020ed76ef5a.html https://exchange.xforce.ibmcloud.com/vulnerabilities/15893 http://orange.kame.net/dev/query-pr.cgi?pr=555 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0155`	vulnerable	2026-06-08 04:47:48.794431	Details available The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate. Published: 2004-04-16T04:00:00.000Z Updated: 2024-08-08T00:10:03.501Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDKSA-2004:027 http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069 http://marc.info/?l=bugtraq&m=108369640424244&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9291 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.