CVE-2004-0155: The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but...

Security readout for executives and security teams

This vulnerability affects the KAME Racoon IKE daemon’s certificate-based VPN authentication. A peer certificate could be accepted without verifying the RSA signature proof, letting an attacker with a trusted certificate establish unauthorized IPsec connectivity or position for man-in-the-middle activity. Exposure is most likely in legacy systems running KAME Racoon for IPsec/IKE with X.509 certificate authentication. The source bundle references multiple vendor advisories, but does not list exact affected versions in the structured affected field. Prioritize if legacy IPsec VPN infrastructure is still in use. The business risk is unauthorized network access or traffic interception, but urgency depends on whether Racoon with certificate authentication remains deployed. Mitigation focus: Identify any deployed Racoon/KAME IPsec services using X.509 Phase 1 authentication.; Apply relevant vendor security updates or guidance from your operating system vendor.; Retire unsupported Racoon deployments where vendor fixes cannot be confirmed..

Prepared

Jun 30, 2026, 05:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.