RCE in Xelerance Openswan

CVE-2010-3308

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long cisco_banner (aka server_banner) field.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References