CVE-2005-3985: High severity Astaro Security Linux vulnerability
The Internet Key Exchange version 1 (IKEv1) implementation in Astaro Security Linux before 6.102 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3985?
CVE-2005-3985 has a high severity as it allows for potential denial of service and arbitrary code execution.
How do I fix CVE-2005-3985?
To fix CVE-2005-3985, upgrade Astaro Security Linux to version 6.102 or later.
What systems are affected by CVE-2005-3985?
CVE-2005-3985 affects Astaro Security Linux versions 6.001, 6.002, and 6.101.
Can CVE-2005-3985 be exploited remotely?
Yes, CVE-2005-3985 can be exploited remotely through crafted IKE packets.
Is there a known exploit for CVE-2005-3985?
Yes, the PROTOS ISAKMP Test Suite demonstrates an exploit for CVE-2005-3985.