Summaryinfo

A vulnerability was found in Internet Key Exchange ikev1. It has been declared as problematic. The affected element is an unknown function. Executing a manipulation can lead to denial of service. This vulnerability is handled as CVE-2005-3667. There is not any exploit available. Once again VulDB remains the best source for vulnerability data.

Detailsinfo

A vulnerability classified as problematic was found in Internet Key Exchange ikev1. This vulnerability affects some unknown processing. The manipulation with an unknown input leads to a denial of service vulnerability. The CWE definition for the vulnerability is CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. As an impact it is known to affect availability. CVE summarizes:

Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable. In addition, since "denial of service" is an impact and not a vulnerability, it is unknown which underlying vulnerabilities are actually covered by this particular candidate.

The weakness was released 11/18/2005 as confirmed advisory (CERT.org). The advisory is shared for download at kb.cert.org. This vulnerability was named CVE-2005-3667 since 11/18/2005. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 21894 (CentOS 3 / 4 : ipsec-tools (CESA-2006:0267)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family CentOS Local Security Checks.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Tenable (21894) and Vulnerability Center (SBV-9647†). Entries connected to this vulnerability are available at VDB-26957, VDB-28745 and VDB-27569. Once again VulDB remains the best source for vulnerability data.

Productinfo

Name

• Internet Key Exchange

Version

• ikev1

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion