CVE-2005-3671

Published: Nov 18, 2005Modified: Apr 16, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

Affected (9)

Products: Frees Wan: Frees Wan · Openswan: Openswan · Xelerance: Openswan

1 product

1 product

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Frees Wan Frees Wan	Version 2.04
Openswan Openswan	Version 2.1.1
Openswan Openswan	Version 2.1.2
Openswan Openswan	Version 2.1.4
Openswan Openswan	Version 2.1.5
Openswan Openswan	Version 2.1.6
Openswan Openswan	Version 2.2
Openswan Openswan	Version 2.3
Xelerance Openswan	Version 2.4.0

References (34)

http://archives.neohapsis.com/archives/bugtraq/2005-12/0138.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html

Source: cve@mitre.org

http://jvn.jp/niscc/NISCC-273756/index.html

Source: cve@mitre.org

http://secunia.com/advisories/17581

Source: cve@mitre.org

http://secunia.com/advisories/17680

Source: cve@mitre.org

http://secunia.com/advisories/17980

Source: cve@mitre.org

http://secunia.com/advisories/18115

Source: cve@mitre.org

http://securitytracker.com/id?1015214

Source: cve@mitre.org

http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/

Source: cve@mitre.org

Exploit

http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/226364

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en

Source: cve@mitre.org

Vendor Advisory

http://www.novell.com/linux/security/advisories/2005_70_ipsec.html

Source: cve@mitre.org

http://www.openswan.org/niscc2/

Source: cve@mitre.org

PatchVendor Advisory

http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00057.html

Source: cve@mitre.org

http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00058.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/15416

Source: cve@mitre.org

Patch

http://archives.neohapsis.com/archives/bugtraq/2005-12/0138.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://jvn.jp/niscc/NISCC-273756/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17581

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17680

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17980

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18115

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015214

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/226364

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.novell.com/linux/security/advisories/2005_70_ipsec.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openswan.org/niscc2/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00057.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00058.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15416

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.