PT-2006-5237 · Openbsd · Openbsd

Publicado 2006-08-29 · Atualizado 2017-07-20 · CVE-2006-4436

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenBSD versions 3.8, 3.9, and possibly earlier versions

Description The issue allows remote attackers to replay IPSec packets and bypass the replay protection by creating Security Associations (SA) with a replay window of size 0 when isakmpd acts as a responder during SA negotiation.

Recommendations For OpenBSD versions 3.8 and 3.9, consider updating the isakmpd configuration to increase the replay window size to prevent replay attacks. For possibly earlier versions, the same recommendation applies, as the issue may also be present in those versions. As a temporary workaround, consider restricting access to the isakmpd service until a proper fix is applied.

Correção

Identificadores relacionados

CVE-2006-4436

DSA-1175-1

Produtos afetados

Openbsd

Referências · 11

• http://openbsd.org/errata.html#isakmpd · Aviso do Fabricante
• http://secunia.com/advisories/21905 · Nota
• http://debian.org/security/2006/dsa-1175 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2006-4436 · Aviso do Fabricante
• http://securityfocus.com/bid/19712 · Correção
• http://openbsd.org/errata38.html#isakmpd · Aviso do Fabricante
• http://secunia.com/advisories/21652 · Aviso do Fabricante
• http://securitytracker.com/id?1016757 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28645 · Nota
• http://osvdb.org/28194 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4436 · Nota de Segurança