ipsec security update

2006-04-2515:22:42

CentOS Project

lists.centos.org

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.179 Low

EPSS

Percentile

96.2%

JSON

CentOS Errata and Security Advisory CESA-2006:0267

The ipsec-tools package is used in conjunction with the IPsec functionality
in the linux kernel and includes racoon, an IKEv1 keying daemon.

A denial of service flaw was found in the ipsec-tools racoon daemon. If a
victim’s machine has racoon configured in a non-recommended insecure
manner, it is possible for a remote attacker to crash the racoon daemon.
(CVE-2005-3732)

Users of ipsec-tools should upgrade to these updated packages, which contain
backported patches, and are not vulnerable to these issues.

Affected packages:
ipsec-tools

Upstream details at:
https://access.redhat.com/errata/RHSA-2006:0267

OSVersionArchitecturePackageVersionFilename
CentOS3i386ipsec-tools< 0.2.5-0.7.rhel3.3ipsec-tools-0.2.5-0.7.rhel3.3.i386.rpm
CentOS3x86_64ipsec-tools< 0.2.5-0.7.rhel3.3ipsec-tools-0.2.5-0.7.rhel3.3.x86_64.rpm
CentOS4ia64ipsec-tools< 0.3.3-6.rhel4.1ipsec-tools-0.3.3-6.rhel4.1.ia64.rpm
CentOS4alphaipsec-tools< 0.3.3-6.rhel4.1ipsec-tools-0.3.3-6.rhel4.1.alpha.rpm
CentOS4s390ipsec-tools< 0.3.3-6.rhel4.1ipsec-tools-0.3.3-6.rhel4.1.s390.rpm
CentOS4s390xipsec-tools< 0.3.3-6.rhel4.1ipsec-tools-0.3.3-6.rhel4.1.s390x.rpm
CentOS3ia64ipsec-tools< 0.2.5-0.7.rhel3.3ipsec-tools-0.2.5-0.7.rhel3.3.ia64.rpm
CentOS3s390ipsec-tools< 0.2.5-0.7.rhel3.3ipsec-tools-0.2.5-0.7.rhel3.3.s390.rpm
CentOS3s390xipsec-tools< 0.2.5-0.7.rhel3.3ipsec-tools-0.2.5-0.7.rhel3.3.s390x.rpm
CentOS4i386ipsec-tools< 0.3.3-6.rhel4.1ipsec-tools-0.3.3-6.rhel4.1.i386.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	3	i386	ipsec-tools	< 0.2.5-0.7.rhel3.3	ipsec-tools-0.2.5-0.7.rhel3.3.i386.rpm
CentOS	3	x86_64	ipsec-tools	< 0.2.5-0.7.rhel3.3	ipsec-tools-0.2.5-0.7.rhel3.3.x86_64.rpm
CentOS	4	ia64	ipsec-tools	< 0.3.3-6.rhel4.1	ipsec-tools-0.3.3-6.rhel4.1.ia64.rpm
CentOS	4	alpha	ipsec-tools	< 0.3.3-6.rhel4.1	ipsec-tools-0.3.3-6.rhel4.1.alpha.rpm
CentOS	4	s390	ipsec-tools	< 0.3.3-6.rhel4.1	ipsec-tools-0.3.3-6.rhel4.1.s390.rpm
CentOS	4	s390x	ipsec-tools	< 0.3.3-6.rhel4.1	ipsec-tools-0.3.3-6.rhel4.1.s390x.rpm
CentOS	3	ia64	ipsec-tools	< 0.2.5-0.7.rhel3.3	ipsec-tools-0.2.5-0.7.rhel3.3.ia64.rpm
CentOS	3	s390	ipsec-tools	< 0.2.5-0.7.rhel3.3	ipsec-tools-0.2.5-0.7.rhel3.3.s390.rpm
CentOS	3	s390x	ipsec-tools	< 0.2.5-0.7.rhel3.3	ipsec-tools-0.2.5-0.7.rhel3.3.s390x.rpm
CentOS	4	i386	ipsec-tools	< 0.3.3-6.rhel4.1	ipsec-tools-0.3.3-6.rhel4.1.i386.rpm