National Cyber Awareness System

Vulnerability Summary for CVE-2005-3732

Overview

The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 15523

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/15523

External Source: SECUNIA

Name: 17668

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/17668

External Source: MISC

Name: http://cvs.sourceforge.net/viewcvs.py/ipsec-tools/ipsec-tools/src/racoon/isakmp_agg.c?r1=1.20.2.3&r2=1.20.2.4&diff_format=u

Type: Patch Information

Hyperlink:http://cvs.sourceforge.net/viewcvs.py/ipsec-tools/ipsec-tools/src/racoon/isakmp_agg.c?r1=1.20.2.3&r2=1.20.2.4&diff_format=u

External Source: VUPEN

Name: ADV-2005-2521

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2005/2521

External Source: UBUNTU

Name: USN-221-1

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-221-1

External Source: FEDORA

Name: FLSA-2006:190941

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/436343/100/0/threaded

External Source: SUSE

Name: SUSE-SA:2005:070

Hyperlink:http://www.novell.com/linux/security/advisories/2005_70_ipsec.html

External Source: MISC

Name: http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en

Hyperlink:http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en

External Source: MANDRIVA

Name: MDKSA-2006:020

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:020

External Source: GENTOO

Name: GLSA-200512-04

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml

External Source: MISC

Name: http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/

Hyperlink:http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/

External Source: DEBIAN

Name: DSA-965

Hyperlink:http://www.debian.org/security/2006/dsa-965

External Source: MLIST

Name: [ipsec-tools-devel] 20051120 Potential DoS fixed in ipsec-tools

Hyperlink:http://sourceforge.net/mailarchive/forum.php?thread_id=9017454&forum_id=32000

External Source: SECTRACK

Name: 1015254

Hyperlink:http://securitytracker.com/id?1015254

External Source: SECUNIA

Name: 20210

Type: Advisory

Hyperlink:http://secunia.com/advisories/20210

External Source: SECUNIA

Name: 19833

Type: Advisory

Hyperlink:http://secunia.com/advisories/19833

External Source: SECUNIA

Name: 18742

Type: Advisory

Hyperlink:http://secunia.com/advisories/18742

External Source: SECUNIA

Name: 18616

Hyperlink:http://secunia.com/advisories/18616

External Source: SECUNIA

Name: 18115

Type: Advisory

Hyperlink:http://secunia.com/advisories/18115

External Source: SECUNIA

Name: 17980

Type: Advisory

Hyperlink:http://secunia.com/advisories/17980

External Source: SECUNIA

Name: 17822

Type: Advisory

Hyperlink:http://secunia.com/advisories/17822

External Source: REDHAT

Name: RHSA-2006:0267

Hyperlink:http://rhn.redhat.com/errata/RHSA-2006-0267.html

External Source: OVAL

Name: oval:org.mitre.oval:def:9857

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9857

External Source: BUGTRAQ

Name: 20051214 Re: [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAK MP Protocol implementation

Hyperlink:http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html

External Source: SGI

Name: 20060501-01-U

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc

References to Check Content

Identifier:oval:org.mitre.oval:def:9857

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9857