CVE-2004-2230

Published: Dec 31, 2004Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Heap-based buffer overflow in isakmpd on OpenBSD 3.4 through 3.6 allows local users to cause a denial of service (panic) and corrupt memory via IPSEC credentials on a socket.

Affected (3)

Products: Openbsd: Openbsd

Openbsd

1 product

Openbsd

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openbsd	Version 3.4
Openbsd Openbsd	Version 3.5
Openbsd Openbsd	Version 3.6

References (12)

http://secunia.com/advisories/13443

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1012511

Source: cve@mitre.org

Patch

http://www.openbsd.org/errata36.html

Source: cve@mitre.org

Patch

http://www.osvdb.org/12400

Source: cve@mitre.org

http://www.securityfocus.com/bid/11928

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/18486

Source: cve@mitre.org

http://secunia.com/advisories/13443