CVE-2006-1646

Published: Apr 6, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x before 20060119, certain FreeBSD releases, and possibly other distributions of BSD or Linux operating systems, when running in aggressive mode, allows remote attackers to cause a denial of service (daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

Affected (1)

Products: Internet Key Exchange: Internet Key Exchange

Internet Key Exchange

1 product

Internet Key Exchange

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Internet Key Exchange Internet Key Exchange	Version 1

References (10)

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-003.txt.asc (unsafe URL)

Source: cve@mitre.org

http://mail-index.netbsd.org/source-changes/2006/01/19/0017.html

Source: cve@mitre.org

http://secunia.com/advisories/19463

Source: cve@mitre.org

Vendor Advisory

http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/

Source: cve@mitre.org

http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en

Source: cve@mitre.org

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-003.txt.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://mail-index.netbsd.org/source-changes/2006/01/19/0017.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19463

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.