Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.

The Internet Key Exchange version 1 (IKEv1) implementation in racoon from ipsec-tools, IPsec tools for Linux, try to dereference a NULL pointer under certain conditions which allows a remote attacker to cause a denial of service.

Updated ipsec-tools packages that fix a bug in racoon are now available.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel and includes racoon, an IKEv1 keying daemon.

A denial of service flaw was found in the ipsec-tools racoon daemon.
If a victim's machine has racoon configured in a non-recommended insecure manner, it is possible for a remote attacker to crash the racoon daemon. (CVE-2005-3732)

Users of ipsec-tools should upgrade to these updated packages, which contain backported patches, and are not vulnerable to these issues.

The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in ipsec-tools racoon before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

The updated packages have been patched to correct this problem.

ID	Name	Product	Family	Severity
22831	Debian DSA-965-1 : ipsec-tools - null dereference	Nessus	Debian Local Security Checks	critical
21894	CentOS 3 / 4 : ipsec-tools (CESA-2006:0267)	Nessus	CentOS Local Security Checks	critical
21286	RHEL 3 / 4 : ipsec-tools (RHSA-2006:0267)	Nessus	Red Hat Local Security Checks	critical
20809	Mandrake Linux Security Advisory : ipsec-tools (MDKSA-2006:020)	Nessus	Mandriva Local Security Checks	critical

Detections

Analytics

CVE-2005-3668

critical

Tenable Plugins

critical

critical

critical

critical