CVE-2004-0164: Kame Racoon

Medium severity, CVSS 5.0. EPSS: 6.7% chance of exploitation in the next 30 days.

KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.

Affected products

• Kame Racoon: version all_versions only

Published 2004-03-03. Last modified 2026-06-16.