CVE-2005-3671

The Internet Key Exchange version 1 IKEv1 implementation in Openswan 2 openswan-2 before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.041.5.4-1.23, allow remote attackers to cause a denial of service via 1 a crafted packet using 3DES with an invalid key length, or 2 unspecified inputs when...

CVE-2005-3673

CVE-2005-3673 relates to an IKEv1 DoS in Check Point products via crafted IKEv1 packets. Connected sources show a broader set of IKEv1 issues (CVE-2005-3666/3667/3668) with remote denial-of-service effects in multiple implementations (notably ipsec-tools’ racoon). The Proton/PROTOS test suite is ...

CVE-2005-3671

CVE-2005-3671 affects OpenSwan 2.x (pre-2.4.4) and Freeswan in SUSE Linux 9.1 (before 2.04_1.5.4-1.23). The vulnerability allows a remote attacker to cause a Denial of Service by processing specially crafted ISAKMP/IKEv1 data: (1) a crafted packet using 3DES with an invalid key length, or (2) uns...

CVE-2005-3674

CVE-2005-3674 concerns the IKEv1 implementation (libike) in Sun Solaris 9/10, where remote crafted IKE packets can crash iked, causing a denial of service. The advisory notes uncertainty about whether this maps to CVE-2005-3666, -3667, or -3668. Connected sources describe related IKEv1 issues in ...

CVE-2005-3673

The Internet Key Exchange version 1 IKEv1 implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which o...

CVE-2005-3670

CVE-2005-3670 covers multiple unspecified IKEv1 vulnerabilities in HP-UX IPSec, HP Jetdirect 635n, and HP Tru64 UNIX implementations that allow remote DoS via certain IKE packets (PROTOS IKEv1 test). The HP advisory does not specify which sub-CVE (CVE-2005-3666/3667/3668) applies. Related connect...

CVE-2005-3672

CVE-2005-3672 concerns the Internet Key Exchange version 1 (IKEv1) implementation in Stonesoft StoneGate Firewall before 2.6.1. A remote attacker can cause a denial of service by sending certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. The Stonesoft advisory...

CVE-2005-3668

CVE-2005-3668 is described as multiple buffer overflows in IKEv1 implementations with several attacker vectors that can lead to a denial of service. Connected sources tie this to ipsec-tools racoon (IPsec-tools) in Red Hat/CentOS advisories and Debian/Nessus findings, indicating a remote DoS via ...

CVE-2005-3667

CVE-2005-3667 is described as a denial-of-service issue affecting Internet Key Exchange version 1 (IKEv1) implementations, demonstrated via the PROTOS ISAKMP Test Suite. The connected documents indicate multiple implementations may be affected and note uncertainty about the precise vulnerable com...

CVE-2005-3669

CVE-2005-3669 covers multiple unspecified vulnerabilities in the Internet Key Exchange v1 (IKEv1) implementation in Cisco products that cause a denial of service (device reset) via malformed IKE packets, demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. The Cisco advisory lacks details to m...

CVE-2005-3668

Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 IKEv1 have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the...

CVE-2005-3666

Technical details (affected implementations, exact root cause, impact, and fixes for CVE-2005-3666) are not publicly available in the provided documents. Monitor for updates as new information becomes available.

CVE-2005-3667

Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 IKEv1 have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information ...

Multiple vulnerabilities in Internet Key Exchange (IKE) version 1 implementations

Overview Numerous vulnerabilities have been reported in various Internet Key Exchange version 1 IKEv1 implementations. The impacts of these vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or cause an IKEv1 implementation to behave in an...

[SA17553] Cisco ISAKMP IKE Message Processing Denial of Service

TITLE: Cisco ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17553 VERIFY ADVISORY: http://secunia.com/advisories/17553/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Cisco SAN-OS 1.x MDS 9000 Switches http://secunia.com/product/3214/ Cisco...