CVE-2004-0590

Published: Dec 6, 2004Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject.

Affected (6)

Products: Frees Wan: Frees Wan, Super Frees Wan · Openswan: Openswan · Strongswan: Strongswan

2 products

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Frees Wan Frees Wan	Version 1
Frees Wan Frees Wan	Version 2
Frees Wan Super Frees Wan	Version 1
Openswan Openswan	Version 1
Openswan Openswan	Version 2
Strongswan Strongswan	Up to 2.1.2