First published: Wed Feb 15 2006(Updated: )
The Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when running IPSec, allows remote attackers to cause a denial of service (crash) via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Avaya VSU 2000 | =3.2.40 | |
Avaya VSU 10000 | =3.2.40 | |
Avaya VSU | =3.2.40 | |
Avaya VSU 7500 | =3.2.40 | |
Avaya CSU 5000 | =3.2.40 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-0718 has a severity rating that indicates it can lead to denial of service, causing affected devices to crash.
To fix CVE-2006-0718, update the Avaya VSU and CSU software to versions that address the vulnerability.
The affected products include the Avaya VSU 100, 2000, 7500, 10000, and CSU 5000 running version 3.2.40.
Yes, CVE-2006-0718 can be exploited remotely using specific IKE packets, causing a denial of service.
The potential impact of CVE-2006-0718 includes crashing the device, leading to service interruption for users.