← Vulnerability feed

Vulnerability record · CVE-2004-0403 · published 1 June 2004

CVE-2004-0403: Kame racoon vulnerability

Kame · Racoon

Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.

5.0 CVSS 2.0 Medium EPSS 2.9% · top 13.8%
5.0CVSS 2.0 base score
2.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
34References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt
ftp://patches.sgi.com/support/free/security/advisories/20040506-01-U.asc
http://marc.info/?l=bugtraq&m=108369640424244&w=2
http://secunia.com/advisories/11410
http://secunia.com/advisories/11877
http://security.gentoo.org/glsa/glsa-200404-17.xml
http://securitytracker.com/id?1009937
http://sourceforge.net/project/shownotes.php?release_id=232288
http://www.kame.net/dev/cvsweb2.cgi/kame/kame/kame/racoon/isakmp.c.diff?r1=1.180&r2=1.181 Exploit
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069
http://www.osvdb.org/5491
http://www.redhat.com/support/errata/RHSA-2004-165.html PatchVendor Advisory
http://www.securityfocus.com/bid/10172
http://www.vuxml.org/freebsd/ccd698df-8e20-11d8-90d1-0020ed76ef5a.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15893
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11220
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A984
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt
ftp://patches.sgi.com/support/free/security/advisories/20040506-01-U.asc
http://marc.info/?l=bugtraq&m=108369640424244&w=2
http://secunia.com/advisories/11410
http://secunia.com/advisories/11877
http://security.gentoo.org/glsa/glsa-200404-17.xml
http://securitytracker.com/id?1009937
http://sourceforge.net/project/shownotes.php?release_id=232288
http://www.kame.net/dev/cvsweb2.cgi/kame/kame/kame/racoon/isakmp.c.diff?r1=1.180&r2=1.181 Exploit
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069
http://www.osvdb.org/5491
http://www.redhat.com/support/errata/RHSA-2004-165.html PatchVendor Advisory
http://www.securityfocus.com/bid/10172
http://www.vuxml.org/freebsd/ccd698df-8e20-11d8-90d1-0020ed76ef5a.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15893
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11220
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A984

Track CVE-2004-0403 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0607Ipsec-tools vulnerabilityThe eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attack…EPSS 5.4%7.5CVE-2004-0155Kame racoon vulnerabilityThe KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authenti…EPSS 3.6%5.0CVE-2005-0398Ipsec-tools vulnerabilityThe KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.EPSS 2.4%5.0CVE-2004-0392Kame racoon vulnerabilityracoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malfor…EPSS 2.5%5.0CVE-2004-0164Kame racoon vulnerabilityKAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message …EPSS 6.7%

Source: NIST National Vulnerability Database (record CVE-2004-0403), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.