Lucene search

PRIOn knowledge basePRION:CVE-2006-0718

HistoryFeb 15, 2006 - 9:02 p.m.

Design/Logic Flaw

2006-02-1521:02:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

65.5%

JSON

The Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when running IPSec, allows remote attackers to cause a denial of service (crash) via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.

CPENameOperatorVersion
csu_5000eq3.2.40
vsu_100eq3.2.40
vsu_10000eq3.2.40
vsu_2000eq3.2.40
vsu_7500eq3.2.40

Name	Operator	Version
csu_5000	eq	3.2.40
vsu_100	eq	3.2.40
vsu_10000	eq	3.2.40
vsu_2000	eq	3.2.40
vsu_7500	eq	3.2.40

References

secunia.com/advisories/18836

support.avaya.com/elmodocs2/security/ASA-2006-043.htm

www.kb.cert.org/vuls/id/226364

www.securityfocus.com/bid/16613

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

65.5%

JSON

Related for PRION:CVE-2006-0718