CVE-2004-0392: racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped con...

Security readout for executives and security teams

CVE-2004-0392 is a remote denial-of-service flaw in racoon, an IKE/IPsec component. A malformed IKE message can make vulnerable racoon versions enter an infinite loop and drop connections. Business impact is availability loss for VPN or IPsec connectivity, not data theft based on the provided sources. Exposure is most likely where racoon before 20040407b is running and reachable by untrusted networks for IKE/IPsec negotiation. The source bundle references FreeBSD, KAME, IBM X-Force, and SCO materials, but does not provide a complete product list. Prioritize if racoon supports business-critical VPN or IPsec links, especially if reachable from the internet. This is an availability risk with old software indicators and incomplete severity data, so response should be inventory-led and vendor-guidance-based. Mitigation focus: Inventory systems running racoon or IPsec/IKE services.; Upgrade racoon to 20040407b or later where applicable.; Apply relevant operating system vendor advisories and packages..

Prepared

Jul 12, 2026, 01:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.