CVE-2005-0162: Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1....

Security readout for executives and security teams

CVE-2005-0162 is an old Openswan VPN daemon flaw. If an exposed Openswan server uses the vulnerable pluto component with XAUTH and PAM enabled, a remote authenticated attacker could potentially run code on the server. The bundle does not show active exploitation. Exposure is most likely on legacy Openswan VPN gateways, especially old Linux distributions or appliances still running Openswan 1.x or early 2.x with XAUTH/PAM support. Modern environments are less likely affected unless they retain obsolete VPN infrastructure. Prioritize if any legacy Openswan VPN service remains internet-facing or supports third-party remote access. The business risk is server compromise through VPN infrastructure, but scope depends on obsolete software still being present. Mitigation focus: Upgrade Openswan 1.x to 1.0.9 or later.; Upgrade Openswan 2.x to 2.3.0 or later.; Apply relevant vendor or distribution security advisories..

Prepared

Jun 30, 2026, 01:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.