CVE-2008-4190: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwr

Routine

MEDIUM 4.4DOWNGRADEDOWNGRADE

CVE-2008-4190 is a medium-severity flaw (CVSS 4.4) affecting openswan, openswan. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream version, this tool has been disabled.

Why this priority

Public exploit reference

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	4.4 (Medium)
EPSS exploit chance	1.1% (top 34%)
CISA exploited list	No
Weakness	CWE-59
Published	2008-09-24
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: openswan · xelerance

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2008-09-24 11:42 UTCPublished CVE record published
2026-06-16 22:57 UTCUpdated Record last modified

openswan openswan DOWNGRADE

Affected: 1.0.4 · 1.0.5 · 1.0.6 · 1.0.7 · 1.0.8 · 1.0.9 · 2.1.1 · 2.1.2

Fixed in: no fixed release known

Safe to downgrade to: a release before 1.0.4

1. Check installed version

apt-cache policy openswan || rpm -q openswan || openswan --version

2. No fixed release: DOWNGRADE to a release before 1.0.4 (Debian / Ubuntu)

apt-cache madison openswan sudo apt install openswan=<VERSION_BEFORE_1.0.4> sudo apt-mark hold openswan

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list openswan sudo dnf downgrade openswan-<VERSION_BEFORE_1.0.4> sudo dnf versionlock add openswan

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

xelerance openswan DOWNGRADE

Affected: 2.3.1 · 2.4.0 · 2.4.2 · 2.4.4 · 2.6.03 · 2.6.04 · 2.6.05 · 2.6.06

Fixed in: no fixed release known

Safe to downgrade to: a release before 2.3.1

1. Check installed version

apt-cache policy openswan || rpm -q openswan || openswan --version

2. No fixed release: DOWNGRADE to a release before 2.3.1 (Debian / Ubuntu)

apt-cache madison openswan sudo apt install openswan=<VERSION_BEFORE_2.3.1> sudo apt-mark hold openswan

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list openswan sudo dnf downgrade openswan-<VERSION_BEFORE_2.3.1> sudo dnf versionlock add openswan

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Exploit-DB: Openswan 2.4.12/2.6.16 - Insecure Temp File Creation Privilege Escalation

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2008-4190?

openswan: downgrade or apply the listed mitigation; openswan: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2008-4190 being exploited?

CVE-2008-4190 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2008-4190 affect?

CVE-2008-4190 affects openswan, openswan. Severity is medium (CVSS 4.4). The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log tempor

How urgent is CVE-2008-4190?

Priority 37/100. Public exploit reference

Related CVEs

CVE-2019-10155 LOW 3.1 UPGRADE UPGRADE The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets whic
CVE-2018-15836 HIGH 7.5 UPGRADE In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation doe
CVE-2014-2037 MEDIUM 5.0 DOWNGRADE Openswan 2.6.40 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon
CVE-2013-6466 MEDIUM 5.0 UPGRADE Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and
CVE-2013-2053 MEDIUM 6.8 UPGRADE Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and

References

← Back to latest CVEs