CVE

Id
14875  
CVE No.
CVE-2005-3671  
Status
Candidate  
Description
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  
Phase
Assigned (20051118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
115011 14875 CVE-2005-3671 MISC:http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/  View
115012 14875 CVE-2005-3671 CONFIRM:http://www.openswan.org/niscc2/  View
115013 14875 CVE-2005-3671 MISC:http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en  View
115014 14875 CVE-2005-3671 MISC:http://jvn.jp/niscc/NISCC-273756/index.html  View
115015 14875 CVE-2005-3671 FEDORA:FEDORA-2005-1092  View
115016 14875 CVE-2005-3671 URL:http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00057.html  View
115017 14875 CVE-2005-3671 FEDORA:FEDORA-2005-1093  View
115018 14875 CVE-2005-3671 URL:http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00058.html  View
115019 14875 CVE-2005-3671 GENTOO:GLSA-200512-04  View
115020 14875 CVE-2005-3671 URL:http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml  View
115021 14875 CVE-2005-3671 BUGTRAQ:20051213 Re: [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAK MP Protocol implementation  View
115022 14875 CVE-2005-3671 URL:http://archives.neohapsis.com/archives/bugtraq/2005-12/0138.html  View
115023 14875 CVE-2005-3671 BUGTRAQ:20051214 Re: [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAK MP Protocol implementation  View
115024 14875 CVE-2005-3671 URL:http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html  View
115025 14875 CVE-2005-3671 SUSE:SUSE-SA:2005:070  View
115026 14875 CVE-2005-3671 URL:http://www.novell.com/linux/security/advisories/2005_70_ipsec.html  View
115027 14875 CVE-2005-3671 CERT-VN:VU#226364  View
115028 14875 CVE-2005-3671 URL:http://www.kb.cert.org/vuls/id/226364  View
115029 14875 CVE-2005-3671 BID:15416  View
115030 14875 CVE-2005-3671 URL:http://www.securityfocus.com/bid/15416  View
115031 14875 CVE-2005-3671 SECTRACK:1015214  View
115032 14875 CVE-2005-3671 URL:http://securitytracker.com/id?1015214  View
115033 14875 CVE-2005-3671 SECUNIA:18115  View
115034 14875 CVE-2005-3671 URL:http://secunia.com/advisories/18115  View
115035 14875 CVE-2005-3671 SECUNIA:17581  View
115036 14875 CVE-2005-3671 URL:http://secunia.com/advisories/17581  View
115037 14875 CVE-2005-3671 SECUNIA:17980  View
115038 14875 CVE-2005-3671 URL:http://secunia.com/advisories/17980  View
115039 14875 CVE-2005-3671 SECUNIA:17680  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62481 JVNDB-2005-000683 CheckPoint 製品の IKEv1 におけるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2005-3673 14875 7.8 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000683.html  View