PT-2005-1461 · Kame+1 · Ipsec-Tools+1

Sebastian Krahmer · Published 2005-03-14 · Updated 2017-10-11 · CVE-2005-0398

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ipsec-tools versions prior to 0.5

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending malformed ISAKMP packets to the KAME racoon daemon.

Recommendations For versions prior to 0.5, update to version 0.5 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-0398

RHSA-2005:232

RHSA-2005_232

Affected Products

Red Hat

Ipsec-Tools

References · 14

• http://securitytracker.com/id?1013433 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0398 · Security Note
• https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=109966&action=view · Vendor Advisory
• http://sourceforge.net/mailarchive/forum.php?thread_id=6787713&forum_id=32000 · Vendor Advisory
• http://secunia.com/advisories/14584 · Vendor Advisory
• http://securityfocus.com/bid/12804 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-232.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:062 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200503-33.xml · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2005-232.html · Note
• http://vupen.com/english/advisories/2005/0264 · Note
• https://redhat.com/security/data/cve/CVE-2005-0398.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19707 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10028 · Note