CVE-2006-4436: Medium severity OpenBSD OpenBSD vulnerability
isakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations (SA) with a replay window of size 0 when isakmpd acts as a responder during SA negotiation, which allows remote attackers to replay IPSec packets and bypass the replay protection.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4436?
CVE-2006-4436 is considered a high severity vulnerability due to its potential to allow remote attackers to replay IPSec packets.
How do I fix CVE-2006-4436?
To fix CVE-2006-4436, it is recommended to upgrade to a patched version of OpenBSD that addresses the replay window issue.
What versions of OpenBSD are affected by CVE-2006-4436?
OpenBSD versions 3.8 and 3.9 are affected by CVE-2006-4436.
What attack vector is utilized in CVE-2006-4436?
CVE-2006-4436 allows remote attackers to exploit a replay attack through a flaw in the Security Association negotiation process.
What is the impact of CVE-2006-4436 on IPSec communications?
The impact of CVE-2006-4436 on IPSec communications is the potential bypass of replay protection, compromising the security of the communications.