PT-2005-1163 · Ietf · Ipsec

Publicado 2005-05-10 · Atualizado 2016-10-18 · CVE-2005-0039

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IPsec (affected versions not specified)

Description The issue affects certain configurations of IPsec, specifically when using Encapsulating Security Payload (ESP) in tunnel mode, integrity protection at a higher layer, or Authentication Header (AH). Remote attackers can decrypt IPsec communications by modifying the outer packet, causing plaintext data from the inner packet to be returned in ICMP messages. This can be achieved through bit-flipping attacks and techniques such as Destination Address Rewriting, modifying the header length to interpret portions of the packet as IP Options, or modifying the protocol field and source address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-0039

Produtos afetados

Ipsec

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2005-0039 · Nota de Segurança
• http://niscc.gov.uk/niscc/docs/al-20050509-00386.html?lang=en · Nota
• http://marc.info/?l=bugtraq&m=111566201610350&w=2 · Nota
• http://vupen.com/english/advisories/2005/0507 · Nota
• http://securityfocus.com/bid/13562 · Nota
• http://kb.cert.org/vuls/id/302220 · Nota
• http://vupen.com/english/advisories/2005/2806 · Nota
• http://secunia.com/advisories/17938 · Nota
• http://securityfocus.com/archive/1/407774 · Aviso do Fabricante
• http://securitytracker.com/id?1015320 · Nota