CVE-2005-3732

Published: Nov 21, 2005Modified: Apr 16, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

Affected (6)

Products: Ipsec Tools: Ipsec Tools

Ipsec Tools

1 product

Ipsec Tools

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ipsec Tools Ipsec Tools	Version 0.5.1
Ipsec Tools Ipsec Tools	Version 0.5.2
Ipsec Tools Ipsec Tools	Version 0.5
Ipsec Tools Ipsec Tools	Version 0.6.1
Ipsec Tools Ipsec Tools	Version 0.6.2
Ipsec Tools Ipsec Tools	Version 0.6

Related CWEs

CWE-399

References (50)

ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc (unsafe URL)

Source: secalert@redhat.com

http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html

Source: secalert@redhat.com

http://cvs.sourceforge.net/viewcvs.py/ipsec-tools/ipsec-tools/src/racoon/isakmp_agg.c?r1=1.20.2.3&r2=1.20.2.4&diff_format=u

Source: secalert@redhat.com

Patch

http://rhn.redhat.com/errata/RHSA-2006-0267.html

Source: secalert@redhat.com

http://secunia.com/advisories/17668

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/17822

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/17980

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/18115

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/18616

Source: secalert@redhat.com

http://secunia.com/advisories/18742

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19833

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20210

Source: secalert@redhat.com

Vendor Advisory

http://securitytracker.com/id?1015254

Source: secalert@redhat.com

http://sourceforge.net/mailarchive/forum.php?thread_id=9017454&forum_id=32000

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-965

Source: secalert@redhat.com

http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:020

Source: secalert@redhat.com

http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2005_70_ipsec.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/436343/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/15523

Source: secalert@redhat.com

Patch

http://www.vupen.com/english/advisories/2005/2521

Source: secalert@redhat.com

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9857

Source: secalert@redhat.com

https://usn.ubuntu.com/221-1/

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc (unsafe URL)