NVD

Id
62564  
Name
CVE-2006-3906  
Description
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2006-07-27  
Modified Date
2009-03-04  
Seq
2006-3906  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
325104 62564 CVE-2006-3906 20060728 Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory  View
325105 62564 CVE-2006-3906 oval:org.mitre.oval:def:5299  View
325106 62564 CVE-2006-3906 1293  View
325107 62564 CVE-2006-3906 1016582  View
325108 62564 CVE-2006-3906 20060726 Internet Key Exchange Resource Exhaustion Attack  View
325109 62564 CVE-2006-3906 http://www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html  View
325110 62564 CVE-2006-3906 20060726 Cisco VPN Concentrator IKE resource exhaustion DoS Advisory  View
325111 62564 CVE-2006-3906 19176  View
325112 62564 CVE-2006-3906 cisco-ike-resource-exhaustion-dos(27972)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58263 JVNDB-2006-000459 Cisco IOS/PIX Firewall の IKE におけるリソースが大量に消費される脆弱性 Cisco IOS 、PIX Firewall が実装する IKE version 1 プロトコルには、新たな IKE セッションリクエストを受信した後に、そのセッションが失効となる前に再度新たな IKE リクエストを繰り返し受信した場合、IKE セッションを確立するためのリソースを過度に消費してしまう脆弱性が存在します。 CVE-2006-3906 20008 CVE-2006-3906 62564 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000459.html 2006-07-26 2007-04-01 View