CVE-2006-1646: Medium severity internet key exchange internet key exchange vulnerability
The Internet Key Exchange version 1 (IKEv1) implementation (isakmpagg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x before 20060119, certain FreeBSD releases, and possibly other distributions of BSD or Linux operating systems, when running in aggressive mode, allows remote attackers to cause a denial of service (daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1646?
CVE-2006-1646 is classified with a high severity rating due to the potential for remote unauthorized access.
How do I fix CVE-2006-1646?
To fix CVE-2006-1646, you should update the affected software to the latest version that addresses this vulnerability.
What systems are impacted by CVE-2006-1646?
CVE-2006-1646 affects systems using the KAME Project racoon implementation of Internet Key Exchange version 1 in aggressive mode.
Can CVE-2006-1646 be exploited remotely?
Yes, CVE-2006-1646 can be exploited remotely, allowing attackers to interfere with the communication security.
What is the original source of the vulnerability CVE-2006-1646?
CVE-2006-1646 originates from a flaw in the Internet Key Exchange version 1 implementation in certain BSD or Linux operating systems.