CVE-2008-1198
The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.
Key facts
- CVSS score
- 7.1 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:N/AC:M/Au:N/C:C/I:N/A:N- EPSS score
- 2.4% (84th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2008-1207)
- Published
- March 6, 2008
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2008-1207 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- redhat / enterprise linux
- redhat / enterprise linux
- redhat / enterprise linux
Certified products that may be affected
9 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Red Hat Enterprise Linux libgcrypt Cryptographic Module v4.0 [1] and Red Hat Enterprise Linux libgcrypt Cryptographic Module v5.0 [2] - Red Hat®, Inc. - FIPS 140 2657 - historical
- Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical
- Red Hat Enterprise Linux 5 OpenSSH Client Cryptographic Module - Red Hat®, Inc. - FIPS 140 1385 - historical
- Red Hat Enterprise Linux 5 OpenSwan Cryptographic Module - Red Hat®, Inc. - FIPS 140 1386 - historical
- Red Hat Enterprise Linux 5 Kernel Crypto API Cryptographic Module - Red Hat®, Inc. - FIPS 140 1387 - historical
See all 9 in the Security Certifications Explorer.
References
- http://secunia.com/advisories/48045(Broken Link)
- http://www.ernw.de/download/pskattack.pdf(Exploit)
- http://www.securitytracker.com/id?1019563(Third Party Advisory, VDB Entry)
- https://bugzilla.redhat.com/show_bug.cgi?id=435274(Issue Tracking)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41053(VDB Entry)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain