The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.
Affected Platforms
Kame RacoonIpsec-Tools Ipsec-ToolsRedhat Enterprise Linux DesktopRedhat Enterprise Linux