Note to Racoon users (IKE/ISAKMP daemon)

From: Jacques A. Vidrine (
Date: 04/07/04

  • Next message: Jacques A. Vidrine: "Changing `' alias"
    Date: Wed, 7 Apr 2004 08:09:31 -0500

    As was accidently posted here earlier by Ralf :-), you should be aware
    of this issue:

      racoon fails to verify signature during Phase 1

      Affected packages
        racoon < 20040407b


      VuXML ID d8769838-8814-11d8-90d1-0020ed76ef5a
      Discovery 2004-04-05
      Entry 2004-04-07

      Ralf Spenneberg discovered a serious flaw in racoon. When using
      Phase 1 main or aggressive mode, racoon does not verify the client's
      RSA signature. Any installations using X.509 authentication are
      strongly urged to upgrade.

      Installations using pre-shared keys are believed to be unaffected.


      CVE CAN-2004-0155

    Jacques Vidrine / / /
    _______________________________________________ mailing list
    To unsubscribe, send any mail to ""

  • Next message: Jacques A. Vidrine: "Changing `' alias"