The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream version, this tool has been disabled.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade openswanUpgrade openswan-doc | Dec 1, 2016 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade net-misc/openswan. | Oct 30, 2017 | Sep 24, 2008 |
| Oracle_linux | — | Upgrade openswanUpgrade openswan-doc | Oct 16, 2024 | Sep 24, 2008 |
| Suse | — | Upgrade openswanUpgrade openswan-doc | Aug 9, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub