Detections
Analytics
MiracleLinux 4 : openswan-2.6.32-9.0.1.AXS4 (AXSA:2012-70:01)
medium Nessus Plugin ID 284023
Synopsis
The remote MiracleLinux host is missing a security update.Description
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-70:01 advisory.Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow youto build secure tunnels through untrusted networks. Everything passing through the untrusted net is encrypted by the ipsec gateway machine and decrypted by the gateway at the other end of the tunnel. The resulting tunnel is a virtual private network or VPN.
This package contains the daemons and userland tools for setting up Openswan. It supports the NETKEY/XFRM IPsec kernel stack that exists in the default Linux kernel.
Openswan 2.6.x also supports IKEv2 (RFC4306) Security issues fixed with this release:
CVE-2011-4073 Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quick_outI1_continue and (2) quick_outI1 functions.
Fixed bugs:
- When the ports were defined and the host was defined with its hostname, openswan did not handle protocol and port configuration correctly. This has been fixed.
- Previously, very large security label strings received from a peer were being truncated but still used.
Those truncated strings could happen to be valid, lead ing to incorrect policy. This has been fixed.
- Erroneous queuing of on-demand requests of setting up an IPsec connection was discovered in the IKEv2 (Internet Key Exchange) code. This is not intended and has been removed.
- Openswan would process the AH (Authentication Header) mode as if it was the ESP (Encrypted Secure Payload) mode, and then fail to set up AH mode security associations (SAs) because it was waiting for an encryption key. This has been fixed.
- If a specific port was configured, IPsec connections over a loopback interface did not work properly.
This has been fixed.
- Enabled the CRL functionality flags on compilation so that openswan supportretrieving Certificate Revocation Lists (CRLs) from HTTP or LDAP CRL Distribution Points (CDPs).
- Corrected the README.x509 file to provide accurate information regarding the directories to be scanned for certification files. openswan now discovers all certificates.
- The Network Manager padlock icon was not cleared after a VPN connection terminated unexpectedly. This has been fixed.
- Openswan sent wrong IKEv2 (Internet Key Exchange) ICMP (Internet Control Message Protocol) selectors to an IPsec destination. This has been fixed.
- When an IP address had been removed from end of an established IPsec tunnel and the other end of the tunnel attempted to reuse the particular IP address to create a new tunnel, the Pluto daemon terminated unexpectedly with a segmentation fault. This has been fixed.
Enhancement:
- Added the iptable-save command, which uses only iptables and does not load kernel modules, unlike the ipsec barf and ipsec verify commands.
Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Update the affected openswan package.See Also
Plugin Details
Severity: Medium
ID: 284023
File Name: miracle_linux_AXSA-2012-70.nasl
Version: 1.1
Type: local
Published: 1/14/2026
Updated: 1/14/2026
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
Vendor
Vendor Severity: High
CVSS v2
Risk Factor: Medium
Base Score: 4
Temporal Score: 3
Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:P
CVSS Score Source: CVE-2011-4073
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.7
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: p-cpe:/a:miracle:linux:openswan, cpe:/o:miracle:linux:4
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/MiracleLinux/release, Host/MiracleLinux/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 2/2/2012
Vulnerability Publication Date: 10/31/2011
Reference Information
CVE: CVE-2011-4073