BID:35452

strongSwan Crafted X.509 Certificate Multiple Remote Denial Of Service Vulnerabilities

Info

strongSwan Crafted X.509 Certificate Multiple Remote Denial Of Service Vulnerabilities

Bugtraq ID:	35452
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-2185 CVE-2009-2661
Remote:	Yes
Local:	No
Published:	Jun 18 2009 12:00AM
Updated:	May 07 2015 05:11PM
Credit:	Orange Labs vulnerability research team
Vulnerable:	SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 11 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 strongSwan strongSwan 4.3.1 strongSwan strongSwan 4.3 strongSwan strongSwan 4.2.15 strongSwan strongSwan 4.2.14 strongSwan strongSwan 4.2.13 strongSwan strongSwan 4.2.7 strongSwan strongSwan 4.2.6 strongSwan strongSwan 4.1 strongSwan strongSwan 2.8.9 strongSwan strongSwan 2.8.8 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. Novell Linux Desktop 9.0 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Openswan Openswan 2.6.21 Openswan Openswan 2.6.20 Openswan Openswan 2.6.16 Openswan Openswan 2.4.14 Openswan Openswan 2.4.13 Openswan Openswan 2.4.4 Openswan Openswan 2.4.2 Openswan Openswan 2.4 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Ingate SIParator 4.7.1 Ingate SIParator 4.6.4 Ingate SIParator 4.6.1 Ingate SIParator 4.6 Ingate SIParator 4.5.2 Ingate SIParator 4.5.1 Ingate SIParator 4.4.1 Ingate SIParator 4.3.4 Ingate SIParator 4.3.3 Ingate SIParator 4.3.2 Ingate SIParator 4.3.1 Ingate SIParator 4.3 Ingate SIParator 4.2.3 Ingate SIParator 4.2.2 Ingate SIParator 4.2.1 Ingate SIParator 4.4 Ingate Firewall 4.7.1 Ingate Firewall 4.6.4 Ingate Firewall 4.6.1 Ingate Firewall 4.6 Ingate Firewall 4.5.2 Ingate Firewall 4.5.1 Ingate Firewall 4.4.1 Ingate Firewall 4.3.4 Ingate Firewall 4.3.3 Ingate Firewall 4.3.2 Ingate Firewall 4.3.1 Ingate Firewall 4.3 Ingate Firewall 4.2 .3 Ingate Firewall 4.2 .2 Ingate Firewall 4.2 .1 Ingate Firewall 4.1.3 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Astaro Security Gateway 7.402

Not Vulnerable:	strongSwan strongSwan 4.3.3 strongSwan strongSwan 4.3.2 strongSwan strongSwan 4.2.17 strongSwan strongSwan 4.2.16 strongSwan strongSwan 2.8.11 strongSwan strongSwan 2.8.10 Openswan Openswan 2.6.22 Openswan Openswan 2.4.15 Ingate SIParator 4.8.1 Ingate Firewall 4.8.1 Astaro Security Gateway 7.405

Discussion

strongSwan Crafted X.509 Certificate Multiple Remote Denial Of Service Vulnerabilities

strongSwan is prone to multiple remote denial-of-service vulnerabilities.

Attackers can exploit these issues to crash the application, denying access to legitimate users.

Versions prior to strongSwan 2.8.10, 4.3.2, and 4.2.16 are vulnerable.

UPDATE (July 27, 2009): Additional corrective measures were added to address these issues in strongSwan 2.8.11. 4.2.17, and 4.3.3.

Exploit / POC

strongSwan Crafted X.509 Certificate Multiple Remote Denial Of Service Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

strongSwan Crafted X.509 Certificate Multiple Remote Denial Of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Debian Linux 5.0 ia-64