CVE-2005-3732
High
Description
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
SeverityHigh
CVSS7.8
Exploit probability—
ProductIpsec-tools
PublishedNov 21, 2005
First seenNov 21, 2005
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipsec-tools ipsec-tools | 0.5, 0.5.1, 0.5.2, 0.6, 0.6.1, 0.6.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.