NetSight
IP …
medium4.4Public exploit code

CVE-2008-4190

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code vi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream version, this tool has been disabled.

Affected products

VendorProductAffected versions
OpenswanOpenswan
Versions 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9
XeleranceOpenswan
Versions 2.3.1, 2.4.0, 2.4.2, 2.4.4, 2.6.03, 2.6.04

Weakness classification

CWE-59

References