← Back to CVEs

CVE-2008-1198

N/A

Description

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.

CVE Details

CVSS v3.1 ScoreN/A

Published3/6/2008

Last Modified4/9/2025

Sourcenvd

Honeypot Sightings0

Affected Products

redhat:enterprise_linux

References

http://secunia.com/advisories/48045(secalert@redhat.com)

http://www.ernw.de/download/pskattack.pdf(secalert@redhat.com)

http://www.securitytracker.com/id?1019563(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=435274(secalert@redhat.com)

https://exchange.xforce.ibmcloud.com/vulnerabilities/41053(secalert@redhat.com)

http://secunia.com/advisories/48045(af854a3a-2127-422b-91ae-364da2661108)

http://www.ernw.de/download/pskattack.pdf(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id?1019563(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=435274(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/41053(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.