CVE-2005-3671
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (7.45%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 7.45% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- frees wan/frees wan · openswan/openswan · xelerance/openswan
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2005-12/0138.html
- http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html
- http://jvn.jp/niscc/NISCC-273756/index.html
- http://secunia.com/advisories/17581
- http://secunia.com/advisories/17680
- http://secunia.com/advisories/17980
- http://secunia.com/advisories/18115
- http://securitytracker.com/id?1015214
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/Exploit
- http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml
- http://www.kb.cert.org/vuls/id/226364Third Party Advisory, US Government Resource
- http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=enVendor Advisory
- http://www.novell.com/linux/security/advisories/2005_70_ipsec.html
- http://www.openswan.org/niscc2/Patch, Vendor Advisory
- http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00057.html
- http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00058.html
- http://www.securityfocus.com/bid/15416Patch
- http://archives.neohapsis.com/archives/bugtraq/2005-12/0138.html
- http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html
- http://jvn.jp/niscc/NISCC-273756/index.html
- http://secunia.com/advisories/17581
- http://secunia.com/advisories/17680
- http://secunia.com/advisories/17980
- http://secunia.com/advisories/18115
- http://securitytracker.com/id?1015214
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/Exploit
- http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml
- http://www.kb.cert.org/vuls/id/226364Third Party Advisory, US Government Resource
- http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=enVendor Advisory
- http://www.novell.com/linux/security/advisories/2005_70_ipsec.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.