← Vulnerability feed

Vulnerability record · CVE-2004-0164 · published 3 March 2004

CVE-2004-0164: Kame racoon vulnerability

Kame · Racoon

KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.

5.0 CVSS 2.0 Medium EPSS 6.7% · top 6.3%
5.0CVSS 2.0 base score
6.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
20References
16 Jun 2026Last modified by NVD

Description

KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-001.txt.asc
http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html
http://marc.info/?l=bugtraq&m=107403331309838&w=2
http://marc.info/?l=bugtraq&m=107411758202662&w=2
http://www.securityfocus.com/bid/9416
http://www.securityfocus.com/bid/9417
https://exchange.xforce.ibmcloud.com/vulnerabilities/14117
https://exchange.xforce.ibmcloud.com/vulnerabilities/14118
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A947
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9737
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-001.txt.asc
http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html
http://marc.info/?l=bugtraq&m=107403331309838&w=2
http://marc.info/?l=bugtraq&m=107411758202662&w=2
http://www.securityfocus.com/bid/9416
http://www.securityfocus.com/bid/9417
https://exchange.xforce.ibmcloud.com/vulnerabilities/14117
https://exchange.xforce.ibmcloud.com/vulnerabilities/14118
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A947
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9737

Track CVE-2004-0164 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0607Ipsec-tools vulnerabilityThe eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attack…EPSS 5.4%7.5CVE-2004-0155Kame racoon vulnerabilityThe KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authenti…EPSS 3.6%5.0CVE-2005-0398Ipsec-tools vulnerabilityThe KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.EPSS 2.4%5.0CVE-2004-0392Kame racoon vulnerabilityracoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malfor…EPSS 2.5%5.0CVE-2004-0403Kame racoon vulnerabilityRacoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.EPSS 2.9%

Source: NIST National Vulnerability Database (record CVE-2004-0164), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.