|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200406-20] FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling Vulnerability Scan
Vulnerability Scan Summary
FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200406-20
(FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling)
All these IPsec implementations have several bugs in the verify_x509cert()
function, which performs certificate validation, that make them vulnerable
to malicious PKCS#7 wrapped objects.
Impact
With a carefully crafted certificate payload a possible hacker can successfully
authenticate against FreeS/WAN, Openswan, strongSwan or Super-FreeS/WAN, or
make the daemon go into an endless loop.
Workaround
There is no known workaround at this time. All users are encouraged to
upgrade to the latest available version.
References:
http://lists.openswan.org/pipermail/dev/2004-June/000370.html
Solution:
All FreeS/WAN 1.9x users should upgrade to the latest stable version:
# emerge sync
# emerge -pv "=net-misc/freeswan-1.99-r1"
# emerge "=net-misc/freeswan-1.99-r1"
All FreeS/WAN 2.x users should upgrade to the latest stable version:
# emerge sync
# emerge -pv ">=net-misc/freeswan-2.04-r1"
# emerge ">=net-misc/freeswan-2.04-r1"
All Openswan 1.x users should upgrade to the latest stable version:
# emerge sync
# emerge -pv "=net-misc/openswan-1.0.6_rc1"
# emerge "=net-misc/openswan-1.0.6_rc1"
All Openswan 2.x users should upgrade to the latest stable version:
# emerge sync
# emerge -pv ">=net-misc/openswan-2.1.4"
# emerge ">=net-misc/openswan-2.1.4"
All strongSwan users should upgrade to the latest stable version:
# emerge sync
# emerge -pv ">=net-misc/strongswan-2.1.3"
# emerge ">=net-misc/strongswan-2.1.3"
All Super-FreeS/WAN users should migrate to the latest stable version of
Openswan. Note that Portage will force a move for Super-FreeS/WAN users to
Openswan.
# emerge sync
# emerge -pv "=net-misc/openswan-1.0.6_rc1"
# emerge "=net-misc/openswan-1.0.6_rc1"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
