FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

racoon -- improper certificate handling

Affected packages
racoon < 20040818a

Details

VuXML ID 2328adef-157c-11d9-8402-000d93664d5c
Discovery 2004-01-31
Entry 2004-10-03

Thomas Walpuski noted when OpenSSL would detect an error condition for a peer certificate, racoon mistakenly ignored the error. This could allow five invalid certificate states to properly be used for authentication.

References

Message 20040614185623.GA10290@unproved.org
URL http://www.kame.net/racoon/racoon-ml/msg00517.html