CVE-2008-4190

no score yetEPSS 1.1%

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream version, this tool has been disabled.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2008-09-24
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

openswan:openswan
xelerance:openswan

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496374
http://dev.gentoo.org/~rbu/security/debiantemp/openswan
http://secunia.com/advisories/34182
http://secunia.com/advisories/34472
http://www.debian.org/security/2009/dsa-1760

Check your stack JSON