CVE-2008-1198

HighCVSS 7.1/10Last modified Jun 16, 2026

Description

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.

Metrics

CVSS 2.0 7.1/10AV:N/AC:M/Au:N/C:C/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/48045Broken Link
http://www.ernw.de/download/pskattack.pdfExploit
http://www.securitytracker.com/id?1019563Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=435274Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/41053VDB Entry
http://secunia.com/advisories/48045Broken Link
http://www.ernw.de/download/pskattack.pdfExploit
http://www.securitytracker.com/id?1019563Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=435274Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/41053VDB Entry

Timeline

Published: Mar 6, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-11994.4Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to CVE-2008-12009.3Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possi CVE-2008-12016.8Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows CVE-2008-12024.3Cross-site scripting (XSS) vulnerability in the web management interface in Adobe LiveCycle Workflow 6.2 allows remote attackers to inject a CVE-2008-12037.5The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for CVE-2008-12044.3Multiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow r CVE-2008-12054.9Unspecified vulnerability in the ipsecah kernel module in Sun Solaris 10, when a key management daemon for IPsec security associations is ru CVE-2008-12066.8Format string vulnerability in the log_message function in lks.c in Linux Kiss Server 1.2, when background (daemon) mode is disabled, allows CVE-2008-12075.0Multiple unspecified vulnerabilities in Fujitsu Interstage Smart Repository, as used in multiple Fujitsu Interstage products, allow remote a CVE-2008-12084.3Cross-site scripting (XSS) vulnerability in the login page in Check Point VPN-1 UTM Edge W Embedded NGX 7.0.48x allows remote attackers to i CVE-2008-12094.3Cross-site scripting (XSS) vulnerability in redirect.do in Xitex WebContent M1 allows remote attackers to inject arbitrary web script or HTM CVE-2008-12109.3Stack-based buffer overflow in the ctags parsing code in Programmer's Notepad before 2.0.8.718 allows user-assisted remote attackers to caus