Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2008-1198

Date: March 6, 2008

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.

Severity Score

Related Resources (8)

http://www.securitytracker.com/id?1019563
https://access.redhat.com/security/cve/CVE-2008-1198
https://exchange.xforce.ibmcloud.com/vulnerabilities/41053
https://nvd.nist.gov/vuln/detail/CVE-2008-1198
http://www.ernw.de/download/pskattack.pdf
https://bugzilla.redhat.com/show_bug.cgi?id=435274
http://secunia.com/advisories/48045
https://www.mend.io/vulnerability-database/CVE-2008-1198

Severity Score

Weakness Type (CWE)

Configuration

CWE-16

Insufficient Information

NVD-CWE-noinfo

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): NONE
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us