Skip to content
Noroxi

kame records

8 published records for vendor kame.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
62.5%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    8 records
    • CVE-2004-0607
      42Plan

      The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remo

      CriticalCVSS 10.0No exploitEPSS 5%

      kame · racoonDec 6, 2004

    • CVE-2008-0177
      36Monitor

      The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of th

      HighCVSS 7.8Proof of conceptEPSS 15%

      kame · ipcompFeb 7, 2008

    • CVE-2004-0155
      31Monitor

      The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature

      HighCVSS 7.5No exploitEPSS 3%

      kame · racoonJun 1, 2004

    • CVE-2008-2464
      29Monitor

      The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers

      HighCVSS 7.1No exploitEPSS 2%

      kame · kameSep 10, 2008

    • CVE-2004-0164
      22Monitor

      KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete

      MediumCVSS 5.0Proof of conceptEPSS 6%

      kame · racoonMar 3, 2004

    • CVE-2004-0403
      21Monitor

      Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length f

      MediumCVSS 5.0No exploitEPSS 2%

      kame · racoonJun 1, 2004

    • CVE-2004-0392
      21Monitor

      racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with

      MediumCVSS 5.0No exploitEPSS 2%

      kame · racoonJun 14, 2004

    • CVE-2005-0398
      21Monitor

      The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.

      MediumCVSS 5.0No exploitEPSS 2%

      ipsec-tools · ipsec-toolsMar 14, 2005