Security Advisory

CVE-2008-4190

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-09-24 10:00:00

Last updated 2024-08-07 10:08:34

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream version, this tool has been disabled.

← Browse all CVEs View on cve.org ↗