strongSwan CVE-2013-6075 Authorization Security Bypass and Denial of Service Vulnerability
BID:63489
Info
strongSwan CVE-2013-6075 Authorization Security Bypass and Denial of Service Vulnerability
| Bugtraq ID: | 63489 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2013-6075 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 01 2013 12:00AM |
| Updated: | May 07 2015 05:09PM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
SuSE SUSE Linux Enterprise Server 11 SP3 for VMware SuSE SUSE Linux Enterprise Server 11 SP3 SuSE Suse Linux Enterprise Desktop 11 SP3 strongSwan strongSwan 5.1 strongSwan strongSwan 5.0.4 strongSwan strongSwan 5.0.3 strongSwan strongSwan 5.0.1 strongSwan strongSwan 4.4.1 strongSwan strongSwan 4.4 strongSwan strongSwan 4.3.7 strongSwan strongSwan 4.3.6 strongSwan strongSwan 4.3.5 strongSwan strongSwan 4.3.3 strongSwan strongSwan 4.3.4 S.u.S.E. openSUSE 12.3 S.u.S.E. openSUSE 11.4 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
strongSwan strongSwan 5.1.1 |
Discussion
strongSwan CVE-2013-6075 Authorization Security Bypass and Denial of Service Vulnerability
strongSwan is prone to a security vulnerability that allows an attacker to bypass certain security restrictions or cause denial of service conditions.
Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions or cause denial of service conditions.
strongSwan versions 4.3.3 through 5.1.0 are vulnerable.
strongSwan is prone to a security vulnerability that allows an attacker to bypass certain security restrictions or cause denial of service conditions.
Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions or cause denial of service conditions.
strongSwan versions 4.3.3 through 5.1.0 are vulnerable.
Exploit / POC
strongSwan CVE-2013-6075 Authorization Security Bypass and Denial of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
strongSwan CVE-2013-6075 Authorization Security Bypass and Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
strongSwan CVE-2013-6075 Authorization Security Bypass and Denial of Service Vulnerability
References:
References:
- strongSwan Denial-of-Service Vulnerability and Potential Authorization Bypass (C (strongSwan)
- strongSwan Homepage (strongSwan)