CVE-2004-0155: Kame Racoon

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.

Affected products

• Kame Racoon: any version

Published 2004-06-01. Last modified 2026-06-16.