CVE-2005-3671
First published: Fri Nov 18 2005(Updated: )
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openswan Openswan | =2.1.6 | |
| Openswan Openswan | =2.1.4 | |
| Openswan Openswan | =2.3 | |
| Openswan Openswan | =2.2 | |
| Openswan Openswan | =2.1.1 | |
| Frees Wan Frees Wan | =2.04 | |
| Openswan Openswan | =2.1.5 | |
| Openswan Openswan | =2.1.2 | |
| Xelerance Openswan | =2.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
- http://www.openswan.org/niscc2/
- http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en
- http://jvn.jp/niscc/NISCC-273756/index.html
- http://www.kb.cert.org/vuls/id/226364
- http://www.securityfocus.com/bid/15416
- http://securitytracker.com/id?1015214
- http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml
- http://archives.neohapsis.com/archives/bugtraq/2005-12/0138.html
- http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html
- http://www.novell.com/linux/security/advisories/2005_70_ipsec.html
- http://secunia.com/advisories/18115
- http://secunia.com/advisories/17581
- http://secunia.com/advisories/17980
- http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00057.html
- http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00058.html
- http://secunia.com/advisories/17680
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/weakness
- agent/author
- agent/event
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/type
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/openswan
- canonical/openswan openswan
- version/openswan openswan/2.1.6
- version/openswan openswan/2.1.4
- version/openswan openswan/2.3
- version/openswan openswan/2.2
- version/openswan openswan/2.1.1
- vendor/frees wan
- canonical/frees wan frees wan
- version/frees wan frees wan/2.04
- version/openswan openswan/2.1.5
- version/openswan openswan/2.1.2
- vendor/xelerance
- canonical/xelerance openswan
- version/xelerance openswan/2.4.0