Description
programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_domain_info data in a packet, a different vulnerability than CVE-2010-3302.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | openswan +1 | 2.6.24-8.el6_0.1 | RHSA-2010:0892 |
Advisories 1
- RHSA-2010:0892 Red Hat Security Advisory: openswan security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- ADV-2010-2526 vdb-entry
- http://www.openswan.org/download/CVE-2010-3302/CVE-2010-3302.txt
- 43588 vdb-entry
- RHSA-2010:0892 vendor-advisory
- 1024749 vdb-entry
- http://www.openswan.org/download/CVE-2010-3308/openswan-2.6.26-2.6.28-CVE-2010-330x.patch
- http://www.openswan.org/download/CVE-2010-3302/openswan-2.6.25-CVE-2010-3302.patch