CVE-2004-0164: KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete cert...

Security readout for executives and security teams

CVE-2004-0164 is an old vulnerability in the KAME IKE daemon, racoon, used for IPsec VPN key management. A remote attacker could cause unauthorized deletion of IPsec or ISAKMP security associations, potentially disrupting VPN connectivity. Business risk is mainly for legacy systems still running affected racoon code. Most modern environments are unlikely to be exposed unless they retain legacy BSD, Apple, or embedded systems using KAME racoon for IPsec/IKE. Exposure depends on whether the IKE service is reachable by untrusted networks and whether vendor fixes were applied. Prioritize if legacy VPN infrastructure remains in production, especially if reachable from the Internet. For fully patched or modern VPN stacks, urgency is lower. The main business impact is potential disruption of encrypted network tunnels rather than broad system compromise based on the provided sources. Mitigation focus: Identify systems running KAME racoon or legacy IPsec/IKE services.; Review NetBSD, Apple, and platform-specific advisories for applicable fixes.; Apply vendor security updates where available for the affected platform..

Prepared

Jul 12, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.