CVE-2006-3906: Medium severity Cisco IOS vulnerability

Published Jul 27, 2006
·
Updated

Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.

Affected Software

276 affected components
Cisco IOS
Cisco Vpn 3001 Concentrator
Cisco Vpn 3015 Concentrator
Cisco Vpn 3020 Concentrator
Cisco Vpn 3030 Concentator
Cisco Vpn 3060 Concentrator
Cisco Vpn 3080 Concentrator
Cisco Adaptive Security Appliance Software=7.0
Cisco Adaptive Security Appliance Software=7.0\(4\)
Cisco Adaptive Security Appliance Software=7.0\(5\)
Cisco Adaptive Security Appliance Software=7.0.1.4
Cisco Adaptive Security Appliance Software=7.0.4.3
Cisco Adaptive Security Appliance Software=7.1\(2\)
Cisco Vpn 3000 Concentrator Series Software=2.0
Cisco Vpn 3000 Concentrator Series Software=2.5.2.a
Cisco Vpn 3000 Concentrator Series Software=2.5.2.b
Cisco Vpn 3000 Concentrator Series Software=2.5.2.c
Cisco Vpn 3000 Concentrator Series Software=2.5.2.d
Cisco Vpn 3000 Concentrator Series Software=2.5.2.f
Cisco Vpn 3000 Concentrator Series Software=3.0
Cisco Vpn 3000 Concentrator Series Software=3.0.3.a
Cisco Vpn 3000 Concentrator Series Software=3.0.3.b
Cisco Vpn 3000 Concentrator Series Software=3.0.4
Cisco Vpn 3000 Concentrator Series Software=3.1
Cisco Vpn 3000 Concentrator Series Software=3.1\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.1.1
Cisco Vpn 3000 Concentrator Series Software=3.1.2
Cisco Vpn 3000 Concentrator Series Software=3.1.4
Cisco Vpn 3000 Concentrator Series Software=3.5\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.5.1
Cisco Vpn 3000 Concentrator Series Software=3.5.2
Cisco Vpn 3000 Concentrator Series Software=3.5.3
Cisco Vpn 3000 Concentrator Series Software=3.5.4
Cisco Vpn 3000 Concentrator Series Software=3.5.5
Cisco Vpn 3000 Concentrator Series Software=3.6
Cisco Vpn 3000 Concentrator Series Software=3.6.1
Cisco Vpn 3000 Concentrator Series Software=3.6.3
Cisco Vpn 3000 Concentrator Series Software=3.6.5
Cisco Vpn 3000 Concentrator Series Software=3.6.7
Cisco Vpn 3000 Concentrator Series Software=3.6.7.a
Cisco Vpn 3000 Concentrator Series Software=3.6.7.b
Cisco Vpn 3000 Concentrator Series Software=3.6.7.c
Cisco Vpn 3000 Concentrator Series Software=3.6.7.d
Cisco Vpn 3000 Concentrator Series Software=3.6.7.f
Cisco Vpn 3000 Concentrator Series Software=3.6.7d
Cisco Vpn 3000 Concentrator Series Software=4.0
Cisco Vpn 3000 Concentrator Series Software=4.0.1
Cisco Vpn 3000 Concentrator Series Software=4.0.2
Cisco Vpn 3000 Concentrator Series Software=4.0.5.b
Cisco Vpn 3000 Concentrator Series Software=4.1
Cisco Vpn 3000 Concentrator Series Software=4.1.5.b
Cisco Vpn 3000 Concentrator Series Software=4.1.7.a
Cisco Vpn 3000 Concentrator Series Software=4.1.7.b
Cisco Vpn 3000 Concentrator Series Software=4.1.7.l
Cisco Vpn 3000 Concentrator Series Software=4.7
Cisco Vpn 3000 Concentrator Series Software=4.7\(rel\)
Cisco Vpn 3000 Concentrator Series Software=4.7.1
Cisco Vpn 3000 Concentrator Series Software=4.7.1.f
Cisco Vpn 3000 Concentrator Series Software=4.7.2
Cisco Vpn 3000 Concentrator Series Software=4.7.2.a
Cisco Vpn 3000 Concentrator Series Software=4.7.2.f
Cisco Vpn 3005 Concentrator Software=4.0.1
Cisco Vpn 3030 Concentator=4.7\(rel\)
Cisco Vpn 3030 Concentator=4.7.1
Cisco Vpn 3030 Concentator=4.7.1.f
Cisco Vpn 3030 Concentator=4.7.2
Cisco Vpn 3030 Concentator=4.7.2.a
Cisco Vpn 3030 Concentator=4.7.2.f
Cisco Pix Asa Ids
Cisco PIX firewall=6.2.2_.111
Cisco PIX firewall=6.2.3_\(110\)
Cisco PIX firewall=6.3.3_\(133\)
Cisco PIX firewall=6.3.5_\(112\)
Cisco Pix Firewall 501
Cisco Pix Firewall 506
Cisco PIX Firewall 515
Cisco Pix Firewall 515e
Cisco Pix Firewall 520
Cisco Pix Firewall 525
Cisco Pix Firewall 535
Cisco Secure Pix Firewall
Cisco PIX firewall=6.1.5\(104\)
Cisco Pix Firewall Software=2.7
Cisco Pix Firewall Software=3.0
Cisco Pix Firewall Software=3.1
Cisco Pix Firewall Software=4.0
Cisco Pix Firewall Software=4.1\(6\)
Cisco Pix Firewall Software=4.1\(6b\)
Cisco Pix Firewall Software=4.2
Cisco Pix Firewall Software=4.2\(1\)
Cisco Pix Firewall Software=4.2\(2\)
Cisco Pix Firewall Software=4.2\(5\)
Cisco Pix Firewall Software=4.3
Cisco Pix Firewall Software=4.4
Cisco Pix Firewall Software=4.4\(4\)
Cisco Pix Firewall Software=4.4\(7.202\)
Cisco Pix Firewall Software=4.4\(8\)
Cisco Pix Firewall Software=5.0
Cisco Pix Firewall Software=5.1
Cisco Pix Firewall Software=5.1\(4\)
Cisco Pix Firewall Software=5.1\(4.206\)
Cisco Pix Firewall Software=5.2
Cisco Pix Firewall Software=5.2\(1\)
Cisco Pix Firewall Software=5.2\(2\)
Cisco Pix Firewall Software=5.2\(3.210\)
Cisco Pix Firewall Software=5.2\(5\)
Cisco Pix Firewall Software=5.2\(6\)
Cisco Pix Firewall Software=5.2\(7\)
Cisco Pix Firewall Software=5.2\(9\)
Cisco Pix Firewall Software=5.3
Cisco Pix Firewall Software=5.3\(1\)
Cisco Pix Firewall Software=5.3\(1.200\)
Cisco Pix Firewall Software=5.3\(2\)
Cisco Pix Firewall Software=5.3\(3\)
Cisco Pix Firewall Software=6.0
Cisco Pix Firewall Software=6.0\(1\)
Cisco Pix Firewall Software=6.0\(2\)
Cisco Pix Firewall Software=6.0\(3\)
Cisco Pix Firewall Software=6.0\(4\)
Cisco Pix Firewall Software=6.0\(4.101\)
Cisco Pix Firewall Software=6.1
Cisco Pix Firewall Software=6.1\(1\)
Cisco Pix Firewall Software=6.1\(2\)
Cisco Pix Firewall Software=6.1\(3\)
Cisco Pix Firewall Software=6.1\(4\)
Cisco Pix Firewall Software=6.1\(5\)
Cisco Pix Firewall Software=6.2
Cisco Pix Firewall Software=6.2\(1\)
Cisco Pix Firewall Software=6.2\(2\)
Cisco Pix Firewall Software=6.2\(3\)
Cisco Pix Firewall Software=6.2\(3.100\)
Cisco Pix Firewall Software=6.3
Cisco Pix Firewall Software=6.3\(1\)
Cisco Pix Firewall Software=6.3\(2\)
Cisco Pix Firewall Software=6.3\(3\)
Cisco Pix Firewall Software=6.3\(3.102\)
Cisco Pix Firewall Software=6.3\(3.109\)
Cisco Pix Firewall Software=6.3\(5\)
All of the following
Cisco IOS
Any of the following
Cisco Vpn 3001 Concentrator
Cisco Vpn 3015 Concentrator
Cisco Vpn 3020 Concentrator
Cisco Vpn 3030 Concentator
Cisco Vpn 3060 Concentrator
Cisco Vpn 3080 Concentrator
Cisco Adaptive Security Appliance Software=7.0
Cisco Adaptive Security Appliance Software=7.0\(4\)
Cisco Adaptive Security Appliance Software=7.0\(5\)
Cisco Adaptive Security Appliance Software=7.0.1.4
Cisco Adaptive Security Appliance Software=7.0.4.3
Cisco Adaptive Security Appliance Software=7.1\(2\)
Cisco Vpn 3000 Concentrator Series Software=2.0
Cisco Vpn 3000 Concentrator Series Software=2.5.2.a
Cisco Vpn 3000 Concentrator Series Software=2.5.2.b
Cisco Vpn 3000 Concentrator Series Software=2.5.2.c
Cisco Vpn 3000 Concentrator Series Software=2.5.2.d
Cisco Vpn 3000 Concentrator Series Software=2.5.2.f
Cisco Vpn 3000 Concentrator Series Software=3.0
Cisco Vpn 3000 Concentrator Series Software=3.0.3.a
Cisco Vpn 3000 Concentrator Series Software=3.0.3.b
Cisco Vpn 3000 Concentrator Series Software=3.0.4
Cisco Vpn 3000 Concentrator Series Software=3.1
Cisco Vpn 3000 Concentrator Series Software=3.1\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.1.1
Cisco Vpn 3000 Concentrator Series Software=3.1.2
Cisco Vpn 3000 Concentrator Series Software=3.1.4
Cisco Vpn 3000 Concentrator Series Software=3.5\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.5.1
Cisco Vpn 3000 Concentrator Series Software=3.5.2
Cisco Vpn 3000 Concentrator Series Software=3.5.3
Cisco Vpn 3000 Concentrator Series Software=3.5.4
Cisco Vpn 3000 Concentrator Series Software=3.5.5
Cisco Vpn 3000 Concentrator Series Software=3.6
Cisco Vpn 3000 Concentrator Series Software=3.6.1
Cisco Vpn 3000 Concentrator Series Software=3.6.3
Cisco Vpn 3000 Concentrator Series Software=3.6.5
Cisco Vpn 3000 Concentrator Series Software=3.6.7
Cisco Vpn 3000 Concentrator Series Software=3.6.7.a
Cisco Vpn 3000 Concentrator Series Software=3.6.7.b
Cisco Vpn 3000 Concentrator Series Software=3.6.7.c
Cisco Vpn 3000 Concentrator Series Software=3.6.7.d
Cisco Vpn 3000 Concentrator Series Software=3.6.7.f
Cisco Vpn 3000 Concentrator Series Software=3.6.7d
Cisco Vpn 3000 Concentrator Series Software=4.0
Cisco Vpn 3000 Concentrator Series Software=4.0.1
Cisco Vpn 3000 Concentrator Series Software=4.0.2
Cisco Vpn 3000 Concentrator Series Software=4.0.5.b
Cisco Vpn 3000 Concentrator Series Software=4.1
Cisco Vpn 3000 Concentrator Series Software=4.1.5.b
Cisco Vpn 3000 Concentrator Series Software=4.1.7.a
Cisco Vpn 3000 Concentrator Series Software=4.1.7.b
Cisco Vpn 3000 Concentrator Series Software=4.1.7.l
Cisco Vpn 3000 Concentrator Series Software=4.7
Cisco Vpn 3000 Concentrator Series Software=4.7\(rel\)
Cisco Vpn 3000 Concentrator Series Software=4.7.1
Cisco Vpn 3000 Concentrator Series Software=4.7.1.f
Cisco Vpn 3000 Concentrator Series Software=4.7.2
Cisco Vpn 3000 Concentrator Series Software=4.7.2.a
Cisco Vpn 3000 Concentrator Series Software=4.7.2.f
Cisco Vpn 3005 Concentrator Software=4.0.1
Cisco Vpn 3030 Concentator=4.7\(rel\)
Cisco Vpn 3030 Concentator=4.7.1
Cisco Vpn 3030 Concentator=4.7.1.f
Cisco Vpn 3030 Concentator=4.7.2
Cisco Vpn 3030 Concentator=4.7.2.a
Cisco Vpn 3030 Concentator=4.7.2.f
Any of the following
Cisco Pix Asa Ids
Cisco PIX firewall=6.2.2_.111
Cisco PIX firewall=6.2.3_\(110\)
Cisco PIX firewall=6.3.3_\(133\)
Cisco PIX firewall=6.3.5_\(112\)
Cisco Pix Firewall 501
Cisco Pix Firewall 506
Cisco PIX Firewall 515
Cisco Pix Firewall 515e
Cisco Pix Firewall 520
Cisco Pix Firewall 525
Cisco Pix Firewall 535
Cisco Secure Pix Firewall
Cisco Pix Firewall Software=2.7
Cisco Pix Firewall Software=3.0
Cisco Pix Firewall Software=3.1
Cisco Pix Firewall Software=4.0
Cisco Pix Firewall Software=4.1\(6\)
Cisco Pix Firewall Software=4.1\(6b\)
Cisco Pix Firewall Software=4.2
Cisco Pix Firewall Software=4.2\(1\)
Cisco Pix Firewall Software=4.2\(2\)
Cisco Pix Firewall Software=4.2\(5\)
Cisco Pix Firewall Software=4.3
Cisco Pix Firewall Software=4.4
Cisco Pix Firewall Software=4.4\(4\)
Cisco Pix Firewall Software=4.4\(7.202\)
Cisco Pix Firewall Software=4.4\(8\)
Cisco Pix Firewall Software=5.0
Cisco Pix Firewall Software=5.1
Cisco Pix Firewall Software=5.1\(4\)
Cisco Pix Firewall Software=5.1\(4.206\)
Cisco Pix Firewall Software=5.2
Cisco Pix Firewall Software=5.2\(1\)
Cisco Pix Firewall Software=5.2\(2\)
Cisco Pix Firewall Software=5.2\(3.210\)
Cisco Pix Firewall Software=5.2\(5\)
Cisco Pix Firewall Software=5.2\(6\)
Cisco Pix Firewall Software=5.2\(7\)
Cisco Pix Firewall Software=5.2\(9\)
Cisco Pix Firewall Software=5.3
Cisco Pix Firewall Software=5.3\(1\)
Cisco Pix Firewall Software=5.3\(1.200\)
Cisco Pix Firewall Software=5.3\(2\)
Cisco Pix Firewall Software=5.3\(3\)
Cisco Pix Firewall Software=6.0
Cisco Pix Firewall Software=6.0\(1\)
Cisco Pix Firewall Software=6.0\(2\)
Cisco Pix Firewall Software=6.0\(3\)
Cisco Pix Firewall Software=6.0\(4\)
Cisco Pix Firewall Software=6.0\(4.101\)
Cisco Pix Firewall Software=6.1
Cisco Pix Firewall Software=6.1\(1\)
Cisco Pix Firewall Software=6.1\(2\)
Cisco Pix Firewall Software=6.1\(3\)
Cisco Pix Firewall Software=6.1\(4\)
Cisco Pix Firewall Software=6.1\(5\)
Cisco Pix Firewall Software=6.1.5\(104\)
Cisco Pix Firewall Software=6.2
Cisco Pix Firewall Software=6.2\(1\)
Cisco Pix Firewall Software=6.2\(2\)
Cisco Pix Firewall Software=6.2\(3\)
Cisco Pix Firewall Software=6.2\(3.100\)
Cisco Pix Firewall Software=6.3
Cisco Pix Firewall Software=6.3\(1\)
Cisco Pix Firewall Software=6.3\(2\)
Cisco Pix Firewall Software=6.3\(3\)
Cisco Pix Firewall Software=6.3\(3.102\)
Cisco Pix Firewall Software=6.3\(3.109\)
Cisco Pix Firewall Software=6.3\(5\)

Event History

Jul 27, 2006
CVE Published
10:04 PM
Data Sourced
10:04 PM
DescriptionWeaknessAffected Software
Jul 28, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2006-3906?

CVE-2006-3906 is classified as a high severity vulnerability, as it allows remote attackers to cause denial of service.

2

How do I fix CVE-2006-3906?

To fix CVE-2006-3906, update affected Cisco devices to the latest recommended patches provided by Cisco.

3

What systems are affected by CVE-2006-3906?

CVE-2006-3906 affects Cisco IOS, VPN 3000 Concentrators, and PIX firewalls.

4

What type of attack is associated with CVE-2006-3906?

CVE-2006-3906 is associated with a denial of service attack that results from flooding IKE Phase-1 packets.

5

How can I mitigate CVE-2006-3906?

Mitigation for CVE-2006-3906 involves configuring rate limiting on IKE sessions and applying the latest security updates.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203