CVE-2007-3805

Published: Jul 16, 2007Modified: Apr 23, 2026

5.4

Vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Exploitability: 4.9 / Impact: 6.9

Source: NVD

Description

The IKE implementation in Clavister CorePlus before 8.80.03, and 8.80.00, does not properly validate certificates during IKE negotiation, which allows remote attackers to cause a denial of service (gateway stop) via certain certificates.

Affected (2)

Products: Clavister: Clavister Coreplus

Clavister

1 product

Clavister Coreplus

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Clavister Clavister Coreplus	Up to 8.80.03
Clavister Clavister Coreplus	Version 8.81.00

Related CWEs

CWE-310

References (10)

http://osvdb.org/37972

Source: cve@mitre.org

http://secunia.com/advisories/25957

Source: cve@mitre.org

PatchVendor Advisory

http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf

Source: cve@mitre.org

http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_81_01.pdf

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35370

Source: cve@mitre.org

http://osvdb.org/37972