Multiple OSs, routers and firewalls IPSec ISAKMP IKE DoS

Multiple vulnerabilities detected with PROTOS IPSec security scanner...

CVE-2005-3915

Technical details for CVE-2005-3915 are not publicly available in the provided documents. Monitor for updates.

[Full-disclosure] SCOSA-2005.52 OpenServer 6.0.0 : KAME Racoon Daemon Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenServer 6.0.0 : KAME Racoon Daemon Denial of Service Vulnerability Advisory number: SCOSA-2005.52 Issue date: 2005 November 28 Cross reference: sr895064 erg712954 fz533033 CVE-2005-0398 1. Problem Description Racoon i...

[SA17663] Clavister Products ISAKMP IKE Message Processing Denial of Service

TITLE: Clavister Products ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17663 VERIFY ADVISORY: http://secunia.com/advisories/17663/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Clavister Security Gateway 8.x http://secunia.com/product/620...

CVE-2005-3768

Buffer overflow in the Internet Key Exchange version 1 IKEv1 implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafte...

[SA17668] IPsec-Tools ISAKMP IKE Message Processing Denial of Service

TITLE: IPsec-Tools ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17668 VERIFY ADVISORY: http://secunia.com/advisories/17668/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: IPsec-Tools 0.x http://secunia.com/product/3352/ DESCRIPTION: A vulnerabilit...

CVE-2005-3733

The Internet Key Exchange version 1 IKEv1 implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before release 6.4, and E-series routers before 7-1-0, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as...

CVE-2005-3732

The Internet Key Exchange version 1 IKEv1 implementation isakmpagg.c in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service null dereference and crash via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for...

CVE-2005-3732

The Internet Key Exchange version 1 IKEv1 implementation isakmpagg.c in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service null dereference and crash via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for...

CVE-2005-3732

Removed by vendor...

Symantec Dynamic VPN Services: ISAKMP Denial of Service

SUMMARY The NISCC National Infrastructure Security Co-ordination Centre a UK-sponsored inter-departmental agency has identified nearly five-thousand potential ISAKMP vulnerabilities. Test for these vulnerabilities were created by the NISCC and distributed to an unspecified number of vendors...

CVE-2005-3666

Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 IKEv1 have multiple unspecified attack vectors and impacts, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original...

CVE-2005-3666

Technical details (affected implementations, exact root cause, impact, and fixes for CVE-2005-3666) are not publicly available in the provided documents. Monitor for updates as new information becomes available.

CVE-2005-3667

Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 IKEv1 have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information ...

CVE-2005-3673

CVE-2005-3673 relates to an IKEv1 DoS in Check Point products via crafted IKEv1 packets. Connected sources show a broader set of IKEv1 issues (CVE-2005-3666/3667/3668) with remote denial-of-service effects in multiple implementations (notably ipsec-tools’ racoon). The Proton/PROTOS test suite is ...

[SA17621] Check Point Firewall/VPN ISAKMP IKE Message Processing Denial of Service

TITLE: Check Point Firewall/VPN ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17621 VERIFY ADVISORY: http://secunia.com/advisories/17621/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Check Point NGX http://secunia.com/product/6010/ SOFTWARE:...

CVE-2002-2139

Cisco PIX Firewall versions affected include 6.0.3 and earlier, and 6.1.x up to 6.1.3. The vulnerability arises because duplicate ISAKMP Security Associations (SAs) for a VPN session are not deleted, enabling a local attacker to hijack a session via a man-in-the-middle attack. The CVE entry from ...

CVE-2002-2139

Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a man-in-the-middle attack...

[SA17608] Nortel Switched Firewall ISAKMP IKE Message Processing Denial of Service

TITLE: Nortel Switched Firewall ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17608 VERIFY ADVISORY: http://secunia.com/advisories/17608/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Nortel Switched Firewall 5000 Series...

[SA17553] Cisco ISAKMP IKE Message Processing Denial of Service

TITLE: Cisco ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17553 VERIFY ADVISORY: http://secunia.com/advisories/17553/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Cisco SAN-OS 1.x MDS 9000 Switches http://secunia.com/product/3214/ Cisco...