Medium Nessus Plugin ID 20369
SynopsisThe remote host is missing a vendor-supplied security patch
DescriptionThe remote host is missing the patch for the advisory SUSE-SA:2005:070 (ipsec-tools,freeswan,openswan).
Openswan, Freeswan and raccoon (ipsec-tools) have been updated to fix crashes in aggressive mode. An attacker might send specially crafted packets that can crash racoon or Pluto.
The ipsec-tools / racoon crashes are tracked by the Mitre CVE ID CVE-2005-3732.
The openswan / freeswan crashes are tracked by the Mitre CVE ID CVE-2005-3671.
SUSE Linux Enterprise Server 8 and SUSE Linux 9.0 contain freeswan 1.x and seem no to be affected by this problem.