CVE

Id
11245  
CVE No.
CVE-2005-0039  
Status
Candidate  
Description
Certain configurations of IPsec, when using Encapsulating Security Payload (ESP) in tunnel mode, integrity protection at a higher layer, or Authentication Header (AH), allow remote attackers to decrypt IPSec communications by modifying the outer packet in ways that cause plaintext data from the inner packet to be returned in ICMP messages, as demonstrated using bit-flipping attacks and (1) Destination Address Rewriting, (2) a modified header length that causes portions of the packet to be interpreted as IP Options, or (3) a modified protocol field and source address.  
Phase
Assigned (20050107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
79452 11245 CVE-2005-0039 MISC:http://www.niscc.gov.uk/niscc/docs/al-20050509-00386.html?lang=en  View
79453 11245 CVE-2005-0039 BUGTRAQ:20050509 NISCC Vulnerability Advisory IPSEC - 004033  View
79454 11245 CVE-2005-0039 URL:http://marc.info/?l=bugtraq&m=111566201610350&w=2  View
79455 11245 CVE-2005-0039 HP:HPSBTU01217  View
79456 11245 CVE-2005-0039 URL:http://www.securityfocus.com/archive/1/407774  View
79457 11245 CVE-2005-0039 HP:SSRT5957  View
79458 11245 CVE-2005-0039 URL:http://www.securityfocus.com/archive/1/407774  View
79459 11245 CVE-2005-0039 CERT-VN:VU#302220  View
79460 11245 CVE-2005-0039 URL:http://www.kb.cert.org/vuls/id/302220  View
79461 11245 CVE-2005-0039 BID:13562  View
79462 11245 CVE-2005-0039 URL:http://www.securityfocus.com/bid/13562  View
79463 11245 CVE-2005-0039 VUPEN:ADV-2005-0507  View
79464 11245 CVE-2005-0039 URL:http://www.vupen.com/english/advisories/2005/0507  View
79465 11245 CVE-2005-0039 VUPEN:ADV-2005-2806  View
79466 11245 CVE-2005-0039 URL:http://www.vupen.com/english/advisories/2005/2806  View
79467 11245 CVE-2005-0039 SECTRACK:1015320  View
79468 11245 CVE-2005-0039 URL:http://securitytracker.com/id?1015320  View
79469 11245 CVE-2005-0039 SECUNIA:17938  View

Related JVN