CVE-2008-1198
published 2008-03-06CVE-2008-1198: The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it…
PriorityP425high7.1CVSS 2.0
AVNACMAuNCCINAN
EPSS
2.43%
82.4th percentile
The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:C/I:N/A:N
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
initscripts: IPSec ifup script allows for aggressive IKE mode
vendor_redhat·2008-02-28·CVSS 7.1
CVE-2008-1198 [HIGH] initscripts: IPSec ifup script allows for aggressive IKE mode
initscripts: IPSec ifup script allows for aggressive IKE mode
The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.
Package: initscripts (Red Hat Enterprise Linux 4) - Will not fix
GHSA
GHSA-h5v2-6q4x-m7v7: The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which mak
ghsa_unreviewed·2022-05-01
CVE-2008-1198 [HIGH] GHSA-h5v2-6q4x-m7v7: The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which mak
The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/48045http://www.ernw.de/download/pskattack.pdfhttp://www.securitytracker.com/id?1019563https://bugzilla.redhat.com/show_bug.cgi?id=435274https://exchange.xforce.ibmcloud.com/vulnerabilities/41053http://secunia.com/advisories/48045http://www.ernw.de/download/pskattack.pdfhttp://www.securitytracker.com/id?1019563https://bugzilla.redhat.com/show_bug.cgi?id=435274https://exchange.xforce.ibmcloud.com/vulnerabilities/41053
2008-03-06
Published