← Back

CVE-2006-3906

nvd nist
Published: Jul 27, 2006Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.

Affected (138)

21 products
Ios
Vpn 3001 Concentrator
Vpn 3005 Concentrator Software
Vpn 3015 Concentrator
Vpn 3020 Concentrator
Vpn 3030 Concentator
Vpn 3060 Concentrator
Vpn 3080 Concentrator
Pix Asa Ids
Pix Firewall
Pix Firewall 501
Pix Firewall 506
Pix Firewall 515
Pix Firewall 515e
Pix Firewall 520
Pix Firewall 525
Pix Firewall 535
Pix Firewall Software
Secure Pix Firewall
Configuration A
138 vulnerable
Vulnerable SoftwareAffected Versions
All versions
Cisco
Version 7.0.1.4
Version 7.0.4.3
Version 7.0
Version 7.0(4)
Version 7.0(5)
Version 7.1(2)
Cisco
Version 2.0
Version 2.5.2.a
Version 2.5.2.b
Version 2.5.2.c
Version 2.5.2.d
Version 2.5.2.f
Version 3.0.3.a
Version 3.0.3.b
Version 3.0.4
Version 3.0
Version 3.1.1
Version 3.1.2
Version 3.1.4
Version 3.1
Version 3.1(rel)
Version 3.5.1
Version 3.5.2
Version 3.5.3
Version 3.5.4
Version 3.5.5
Version 3.5(rel)
Version 3.6.1
Version 3.6.3
Version 3.6.5
Version 3.6.7.a
Version 3.6.7.b
Version 3.6.7.c
Version 3.6.7.d
Version 3.6.7.f
Version 3.6.7
Version 3.6.7d
Version 3.6
Version 4.0.1
Version 4.0.2
Version 4.0.5.b
Version 4.0
Version 4.1.5.b
Version 4.1.7.a
Version 4.1.7.b
Version 4.1.7.l
Version 4.1
Version 4.7.1.f
Version 4.7.1
Version 4.7.2.a
Version 4.7.2.f
Version 4.7.2
Version 4.7
Version 4.7(rel)
All versions
Version 4.0.1
All versions
All versions
Cisco
All versions
Version 4.7.1.f
Version 4.7.1
Version 4.7.2.a
Version 4.7.2.f
Version 4.7.2
Version 4.7(rel)
All versions
All versions
All versions
Cisco
Version 6.2.2_.111
Version 6.2.3_(110)
Version 6.3.3_(133)
Version 6.3.5_(112)
All versions
All versions
All versions
All versions
All versions
All versions
All versions
Cisco
Version 2.7
Version 3.0
Version 3.1
Version 4.0
Version 4.1(6)
Version 4.1(6b)
Version 4.2
Version 4.2(1)
Version 4.2(2)
Version 4.2(5)
Version 4.3
Version 4.4
Version 4.4(4)
Version 4.4(7.202)
Version 4.4(8)
Version 5.0
Version 5.1
Version 5.1(4.206)
Version 5.1(4)
Version 5.2
Version 5.2(1)
Version 5.2(2)
Version 5.2(3.210)
Version 5.2(5)
Version 5.2(6)
Version 5.2(7)
Version 5.2(9)
Version 5.3
Version 5.3(1.200)
Version 5.3(1)
Version 5.3(2)
Version 5.3(3)
Version 6.0
Version 6.0(1)
Version 6.0(2)
Version 6.0(3)
Version 6.0(4.101)
Version 6.0(4)
Version 6.1.5(104)
Version 6.1
Version 6.1(1)
Version 6.1(2)
Version 6.1(3)
Version 6.1(4)
Version 6.1(5)
Version 6.2
Version 6.2(1)
Version 6.2(2)
Version 6.2(3.100)
Version 6.2(3)
Version 6.3
Version 6.3(1)
Version 6.3(2)
Version 6.3(3.102)
Version 6.3(3.109)
Version 6.3(3)
Version 6.3(5)
All versions

References (20)

Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.