7.5
CVSSv2

CVE-2005-3768

Published: 23/11/2005 Updated: 08/03/2011
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote malicious users to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

Vulnerable Product Search on Vulmon Subscribe to Product

symantec enterprise firewall 8.0

symantec gateway security 5300 1.0

symantec gateway security 5310 1.0

symantec firewall vpn appliance 100

symantec gateway security 5400 2.0.1

symantec firewall vpn appliance 200

symantec gateway security 300 2.0

symantec gateway security 400 2.0

symantec gateway security 5000 series 3.0

symantec gateway security 5100

Vendor Advisories

Multiple Cisco products contain vulnerabilities in the processing of IPSec IKE (Internet Key Exchange) messages These vulnerabilities were identified by the University of Oulu Secure Programming Group (OUSPG) "PROTOS" Test Suite for IPSec and can be repeatedly exploited to produce a denial of service Cisco has made free software availa ...