VULNERABILITY INTELLIGENCE

CVE-2008-1198

CVSS score7.1 HIGH
EPSS probability2.43%
CISA KEVNot currently listed
Published2008-03-06
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:N/A:N

Description

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.

Primary references