{"id":"CVE-2008-1198","aliases":["EUVD-2008-1207","GHSA-h5v2-6q4x-m7v7","RHSA-2012:0312"],"status":"published","title":"The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use...","description":"The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.","severity":{"version":"2.0","score":7.1,"vector":"AV:N/AC:M/Au:N/C:C/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02432,"percentile":0.8435,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2008-03-06T21:00:00Z","modified":"2026-06-26T10:18:03Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"initscripts","fixed_in":["0:8.45.42-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"initscripts-debuginfo","fixed_in":["0:8.45.42-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"initscripts","fixed_in":["0:8.45.42-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"initscripts-debuginfo","fixed_in":["0:8.45.42-1.el5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"initscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.45.42-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"initscripts-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.45.42-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"initscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.45.42-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"initscripts-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.45.42-1.el5"}]}]}],"products":[{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"http://www.ernw.de/download/pskattack.pdf","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41053","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=435274","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"http://secunia.com/advisories/48045","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.securitytracker.com/id?1019563","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1198","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-h5v2-6q4x-m7v7"},{"url":"https://access.redhat.com/errata/RHSA-2012:0312","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=679998","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0312.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-1198","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-1198","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2008-1198","description":"The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.","status":"published","published":"2008-03-06T21:00:00Z","modified":"2024-08-07T08:08:57.786Z","updated_at":"2026-11-02T14:34:47.71012Z"}],"euvd":[{"id":"EUVD-2008-1207","description":"The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.","status":"published","published":"2008-03-06T21:00:00Z","modified":"2024-08-07T08:08:57Z","updated_at":"2026-11-03T01:39:02.668683Z"}],"ghsa":[{"id":"GHSA-h5v2-6q4x-m7v7","title":"The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use...","description":"The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.","status":"published","published":"2022-05-01T23:37:38Z","modified":"2023-01-31T05:05:39Z","updated_at":"2026-11-02T14:48:53.866001Z"}],"nvd":[{"id":"CVE-2008-1198","description":"The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.","status":"published","published":"2008-03-06T21:44:00Z","modified":"2026-06-16T22:51:12.847Z","cvss":[{"version":"2.0","score":7.1,"vector":"AV:N/AC:M/Au:N/C:C/I:N/A:N","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:25.307768Z"}],"osv":[{"id":"RHSA-2012:0312","title":"Red Hat Security Advisory: initscripts security and bug fix update","status":"published","published":"2024-09-15T19:33:58Z","modified":"2026-06-26T10:18:03Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}