CVE-2005-3667
Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite…
Does this matter?
Lower severity and a low EPSS score (2.44%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable. In addition, since "denial of service" is an impact and not a vulnerability, it is unknown which underlying vulnerabilities are actually covered by this particular candidate.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 2.44% probability · 83th percentile
- CISA KEV
- Not listed
- Affected
- internet key exchange/internet key exchange
- Source
- cve@mitre.org
References
- http://jvn.jp/niscc/NISCC-273756/index.html
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
- http://www.kb.cert.org/vuls/id/226364Third Party Advisory, US Government Resource
- http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=enVendor Advisory
- http://jvn.jp/niscc/NISCC-273756/index.html
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
- http://www.kb.cert.org/vuls/id/226364Third Party Advisory, US Government Resource
- http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=enVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.