Racoon prior to 20040408a allows remote malicious users to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.
kame racoon