CVEvulnerability
CVE-2006-3906
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-07-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.
Affected configurations
• cisco ios
• cisco vpn 3001 concentrator
• cisco vpn 3015 concentrator
• cisco vpn 3020 concentrator
• cisco vpn 3030 concentator
• cisco vpn 3060 concentrator
• cisco vpn 3080 concentrator
• cisco adaptive security appliance software 7.0
• cisco adaptive security appliance software 7.0\(4\)
• cisco adaptive security appliance software 7.0\(5\)
• cisco adaptive security appliance software 7.0.1.4
• cisco adaptive security appliance software 7.0.4.3
• cisco adaptive security appliance software 7.1\(2\)
• cisco vpn 3000 concentrator series software 2.0
• cisco vpn 3000 concentrator series software 2.5.2.a
• cisco vpn 3000 concentrator series software 2.5.2.b
• cisco vpn 3000 concentrator series software 2.5.2.c
• cisco vpn 3000 concentrator series software 2.5.2.d
• cisco vpn 3000 concentrator series software 2.5.2.f
• cisco vpn 3000 concentrator series software 3.0
• cisco vpn 3000 concentrator series software 3.0.3.a
• cisco vpn 3000 concentrator series software 3.0.3.b
• cisco vpn 3000 concentrator series software 3.0.4
• cisco vpn 3000 concentrator series software 3.1
• cisco vpn 3000 concentrator series software 3.1\(rel\)
• cisco vpn 3000 concentrator series software 3.1.1
• cisco vpn 3000 concentrator series software 3.1.2
• cisco vpn 3000 concentrator series software 3.1.4
• cisco vpn 3000 concentrator series software 3.5\(rel\)
• cisco vpn 3000 concentrator series software 3.5.1
• cisco vpn 3000 concentrator series software 3.5.2
• cisco vpn 3000 concentrator series software 3.5.3
• cisco vpn 3000 concentrator series software 3.5.4
• cisco vpn 3000 concentrator series software 3.5.5
• cisco vpn 3000 concentrator series software 3.6
• cisco vpn 3000 concentrator series software 3.6.1
• cisco vpn 3000 concentrator series software 3.6.3
• cisco vpn 3000 concentrator series software 3.6.5
• cisco vpn 3000 concentrator series software 3.6.7
• cisco vpn 3000 concentrator series software 3.6.7.a
• cisco vpn 3000 concentrator series software 3.6.7.b
• cisco vpn 3000 concentrator series software 3.6.7.c
• cisco vpn 3000 concentrator series software 3.6.7.d
• cisco vpn 3000 concentrator series software 3.6.7.f
• cisco vpn 3000 concentrator series software 3.6.7d
• cisco vpn 3000 concentrator series software 4.0
• cisco vpn 3000 concentrator series software 4.0.1
• cisco vpn 3000 concentrator series software 4.0.2
• cisco vpn 3000 concentrator series software 4.0.5.b
• cisco vpn 3000 concentrator series software 4.1
• cisco vpn 3000 concentrator series software 4.1.5.b
• cisco vpn 3000 concentrator series software 4.1.7.a
• cisco vpn 3000 concentrator series software 4.1.7.b
• cisco vpn 3000 concentrator series software 4.1.7.l
• cisco vpn 3000 concentrator series software 4.7
• cisco vpn 3000 concentrator series software 4.7\(rel\)
• cisco vpn 3000 concentrator series software 4.7.1
• cisco vpn 3000 concentrator series software 4.7.1.f
• cisco vpn 3000 concentrator series software 4.7.2
• cisco vpn 3000 concentrator series software 4.7.2.a
… and 78 more
References
- http://archives.neohapsis.com/archives/bugtraq/2006-07/0531.html archives.neohapsis.com
- http://securityreason.com/securityalert/1293 securityreason.com
- http://securitytracker.com/id?1016582 securitytracker.com
- http://www.cisco.com/en/US/tech/tk583/tk372/tsd_technology_security_response09186a00806f33d4.html www.cisco.com
- http://www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html www.nta-monitor.com
- http://www.osvdb.org/29068 www.osvdb.org
- http://www.securityfocus.com/archive/1/441203/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19176 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27972 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5299 oval.cisecurity.org
- http://archives.neohapsis.com/archives/bugtraq/2006-07/0531.html archives.neohapsis.com
- http://securityreason.com/securityalert/1293 securityreason.com
- http://securitytracker.com/id?1016582 securitytracker.com
- http://www.cisco.com/en/US/tech/tk583/tk372/tsd_technology_security_response09186a00806f33d4.html www.cisco.com
- http://www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html www.nta-monitor.com
- http://www.osvdb.org/29068 www.osvdb.org
- http://www.securityfocus.com/archive/1/441203/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19176 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27972 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5299 oval.cisecurity.org