Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable. In addition, since "denial of service" is an impact and not a vulnerability, it is unknown which underlying vulnerabilities are actually covered by this particular candidate.

The Internet Key Exchange version 1 (IKEv1) implementation in racoon from ipsec-tools, IPsec tools for Linux, try to dereference a NULL pointer under certain conditions which allows a remote attacker to cause a denial of service.

Updated ipsec-tools packages that fix a bug in racoon are now available.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel and includes racoon, an IKEv1 keying daemon.

A denial of service flaw was found in the ipsec-tools racoon daemon.
If a victim's machine has racoon configured in a non-recommended insecure manner, it is possible for a remote attacker to crash the racoon daemon. (CVE-2005-3732)

Users of ipsec-tools should upgrade to these updated packages, which contain backported patches, and are not vulnerable to these issues.

The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in ipsec-tools racoon before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

The updated packages have been patched to correct this problem.

SunOS 5.10_x86: elfsign patch.
Date this patch was last updated by Sun : Apr/16/07

SunOS 5.10: elfsign patch.
Date this patch was last updated by Sun : Apr/16/07

ID	Name	Product	Family	Severity
22831	Debian DSA-965-1 : ipsec-tools - null dereference	Nessus	Debian Local Security Checks	critical
21894	CentOS 3 / 4 : ipsec-tools (CESA-2006:0267)	Nessus	CentOS Local Security Checks	critical
21286	RHEL 3 / 4 : ipsec-tools (RHSA-2006:0267)	Nessus	Red Hat Local Security Checks	critical
20809	Mandrake Linux Security Advisory : ipsec-tools (MDKSA-2006:020)	Nessus	Mandriva Local Security Checks	critical
20333	Solaris 10 (x86) : 118372-10	Nessus	Solaris Local Security Checks	critical
20332	Solaris 10 (sparc) : 118371-10	Nessus	Solaris Local Security Checks	critical

Detections

Analytics

CVE-2005-3667

high

Tenable Plugins

critical

critical

critical

critical

critical

critical