CVE-2009-2868

CVE-2009-2868 : Affects Cisco IOS 12.2–12.4 where certificate-based authentication is used for IKE. The vulnerability is in the IKE implementation that allows a remote attacker to exhaust Phase 1 SAs, causing denial of service by preventing new IPsec sessions. Cisco’s advisory (cisco-sa-20090923-...