PT-2005-1163 · Ietf · Ipsec

Published 2005-05-10 · Updated 2016-10-18 · CVE-2005-0039

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IPsec (affected versions not specified)

Description The issue affects certain configurations of IPsec, specifically when using Encapsulating Security Payload (ESP) in tunnel mode, integrity protection at a higher layer, or Authentication Header (AH). Remote attackers can decrypt IPsec communications by modifying the outer packet, causing plaintext data from the inner packet to be returned in ICMP messages. This can be achieved through bit-flipping attacks and techniques such as Destination Address Rewriting, modifying the header length to interpret portions of the packet as IP Options, or modifying the protocol field and source address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-0039

Affected Products

Ipsec

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2005-0039 · Security Note
• http://securityfocus.com/archive/1/407774 · Vendor Advisory
• http://niscc.gov.uk/niscc/docs/al-20050509-00386.html?lang=en · Note
• http://marc.info/?l=bugtraq&m=111566201610350&w=2 · Note
• http://vupen.com/english/advisories/2005/0507 · Note
• http://securityfocus.com/bid/13562 · Note
• http://kb.cert.org/vuls/id/302220 · Note
• http://vupen.com/english/advisories/2005/2806 · Note
• http://secunia.com/advisories/17938 · Note
• http://securitytracker.com/id?1015320 · Note