CVEvulnerability

CVE-2005-3732

7.8 HIGH Published 2005-11-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-11-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-399

Description

The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

Affected configurations

• ipsec-tools ipsec-tools 0.5 • ipsec-tools ipsec-tools 0.5.1 • ipsec-tools ipsec-tools 0.5.2 • ipsec-tools ipsec-tools 0.6 • ipsec-tools ipsec-tools 0.6.1 • ipsec-tools ipsec-tools 0.6.2

Related

Weakness · not in database (1)

References