CVE-2004-0164

KAME IKE daemon - RCE

Title source: llm

Description

KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Thomas Walpuski · cdosfreebsd

https://www.exploit-db.com/exploits/23540

View Code ZIP pw:eip

References (10)

[Mailing List] http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9737

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A947

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/9417

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/9416

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/14117

[Mailing List] http://marc.info/?l=bugtraq&m=107411758202662&w=2

[Vendor Advisory] ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-001.txt.asc

[Mailing List] http://marc.info/?l=bugtraq&m=107403331309838&w=2

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/14118

Scores

EPSS 0.1269

EPSS Percentile 94.0%

Details

Status published

Products (1)

kame/racoon all_versions

Published Mar 03, 2004

Tracked Since Feb 18, 2026