Back to Database
Status published
High
CVE-2005-0162
Stack-based buffer overflow in the get_internal_addresses function in the pluto...
Vulnerability Description
Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-0162
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.redhat.com/archives/fedora-announce-list/2005-January/msg00103.html
- http://securitytracker.com/id?1013014
- http://www.securityfocus.com/bid/12377
- http://www.idefense.com/application/poi/display?id=190&type=vulnerabilities
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19078
- http://secunia.com/advisories/14062
- http://secunia.com/advisories/14038
- http://www.osvdb.org/13195
- http://www.openswan.org/support/vuln/IDEF0785/
More from openswan
View All →CVE-2011-2147
Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid,...
Low
3.6
CVE-2008-4966
linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via...
Medium
6.9
CVE-2008-4190
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and...
Medium
4.4
Affected Vendor
openswan
View all reports →Affected Software
openswan
Vulnerable Versions:
0, 2.3.0
Timeline
Official Publish:
January 29th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.