PT-2006-3264 · Oracle · Solaris+1

Publicado 2006-05-10 · Atualizado 2017-07-20 · CVE-2006-2298

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Solaris versions 9 and 10

Description The issue affects the Internet Key Exchange version 1 (IKEv1) implementation in the libike library, allowing remote attackers to cause a denial of service by crashing the in.iked daemon via crafted IKE packets.

Recommendations For Solaris version 9, apply the recommended patch to fix the issue. For Solaris version 10, apply the recommended patch to fix the issue. As a temporary workaround, consider restricting access to the IKEv1 implementation to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-2298

Produtos afetados

Solaris

Libike

Referências · 9

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102246-1 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/1733 · Nota
• http://ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp · Nota
• http://securitytracker.com/id?1016043 · Nota
• http://niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2298 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26311 · Nota
• http://secunia.com/advisories/20050 · Aviso do Fabricante
• http://securityfocus.com/bid/17902 · Nota