CVE-2004-0607: Ipsec-Tools

High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days.

The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.

Affected products

• Ipsec-Tools Ipsec-Tools: version 0.3 only; version 0.3.1 only; version 0.3.2 only; version 0.3_rc1 only; version 0.3_rc2 only; version 0.3_rc3 only; …
• Kame Racoon: any version; version 2003-07-11 only; version 2004-04-05 only; version 2004-04-07b only; version 2004-05-03 only
• Red Hat Enterprise Linux: version 3.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only

Published 2004-12-06. Last modified 2026-06-16.