CVE

Id
8648  
CVE No.
CVE-2004-0220  
Status
Candidate  
Description
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Test Suite.  
Phase
Assigned (20040313)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
54303 8648 CVE-2004-0220 BUGTRAQ:20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities  View
54304 8648 CVE-2004-0220 URL:http://marc.info/?l=bugtraq&m=108008530028019&w=2  View
54305 8648 CVE-2004-0220 MISC:http://www.rapid7.com/advisories/R7-0018.html  View
54306 8648 CVE-2004-0220 OPENBSD:20040317 015: RELIABILITY FIX: March 17, 2004  View
54307 8648 CVE-2004-0220 URL:http://www.openbsd.org/errata.html  View
54308 8648 CVE-2004-0220 CERT-VN:VU#223273  View
54309 8648 CVE-2004-0220 URL:http://www.kb.cert.org/vuls/id/223273  View
54310 8648 CVE-2004-0220 BID:9907  View
54311 8648 CVE-2004-0220 URL:http://www.securityfocus.com/bid/9907  View
54312 8648 CVE-2004-0220 SECTRACK:1009468  View
54313 8648 CVE-2004-0220 URL:http://www.securitytracker.com/alerts/2004/Mar/1009468.html  View
54314 8648 CVE-2004-0220 XF:openbsd-isakmp-integer-underflow(15629)  View

Related JVN