Two authentication errors within a verify_x509cert() function allows for malicious people to bypass security restrictions. Affected products include: superfreeswan 1.x, openswan 1.x to 2.x, strongSwan below 2.1.3, and any version of FreeS/WAN 1.x or 2.x with the X.509 patch.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33669/Openswan.txt
Source: https://packetstormsecurity.com/files/33669/Openswan.txt.html