Published: 18/11/2005 Updated: 08/03/2011

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Sun Solaris 9 and 10 allows remote malicious users to cause a denial of service (in.iked crash) via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sun solaris 10.0
sun solaris 9.0

Multiple Cisco products contain vulnerabilities in the processing of IPSec IKE (Internet Key Exchange) messages These vulnerabilities were identified by the University of Oulu Secure Programming Group (OUSPG) "PROTOS" Test Suite for IPSec and can be repeatedly exploited to produce a denial of service Cisco has made free software availa ...

NVD-CWE-Other http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en http://sunsolve.sun.com/search/document.do?assetkey=1-26-102040-1 http://jvn.jp/niscc/NISCC-273756/index.html http://www.kb.cert.org/vuls/id/226364 http://securitytracker.com/id?1015210 http://secunia.com/advisories/17554 http://www.securityfocus.com/bid/15420 http://www.vupen.com/english/advisories/2005/2417 https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20051114-ipsec

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-3674

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect