Уязвимость CVE-2013-2944: Информация

Описание

strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature.

Важность: MEDIUM (4,9)

Ссылки на рекомендации, решения и инструменты

1. Подверженные конфигурации:

   1. Конфигурация 1

      cpe:2.3:a:strongswan:strongswan:4.3.7:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:4.5.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:4.5.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:5.0.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:4.4.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:4.5.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:4.3.5:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:4.6.4:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:4.6.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:4.6.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:5.0.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:4.3.6:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:4.6.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:4.6.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:5.0.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:4.4.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:strongswan:strongswan:4.5.0:*:*:*:*:*:*:*

      ---