CVE-2008-1198

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use...

7.1 HighFix available

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.

Exploit likelihood

2.43%Up 1.2 points since Feb 4, 2022

What each source reports

NVD Score used 7.1

Record: CVE-2008-1198
CVSS 2.0: 7.1 HighAV:N/AC:M/Au:N/C:C/I:N/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-1198
Updated: 2026-11-02

EUVDEUVD-2008-1207 No score

Record: EUVD-2008-1207
Updated: 2026-11-03

GitHub AdvisoriesGHSA-h5v2-6q4x-m7v7 No score

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use...

Record: GHSA-h5v2-6q4x-m7v7
Updated: 2026-11-02

Affected products

redhat enterprise linux

Affected packages

Affected packages
Package	Affected	Fixed
`initscripts` Red Hat:enterprise_linux:5::client	before 0:8.45.42-1.el5	0:8.45.42-1.el5
`initscripts-debuginfo` Red Hat:enterprise_linux:5::client	before 0:8.45.42-1.el5	0:8.45.42-1.el5
`initscripts` Red Hat:enterprise_linux:5::server	before 0:8.45.42-1.el5	0:8.45.42-1.el5
`initscripts-debuginfo` Red Hat:enterprise_linux:5::server	before 0:8.45.42-1.el5	0:8.45.42-1.el5

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-1198 is a high vulnerability (CVSS 7.1) in Redhat Enterprise Linux, published March 6, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.43%, the 84th percentile. Fixed in initscripts 0:8.45.42-1.el5.

References

Show 7 moreShow less