PT-2005-4425 · Cisco · Cisco Ios+2

Published 2005-11-14 · Updated 2008-09-05 · CVE-2005-3668

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS (affected versions not specified) Multiple Cisco products (affected versions not specified)

Description The issue is related to multiple buffer overflows in implementations of Internet Key Exchange version 1 (IKEv1), which can lead to denial of service. The vulnerabilities were identified by the University of Oulu Secure Programming Group (OUSPG) "PROTOS" Test Suite for IPSec. These vulnerabilities can be repeatedly exploited to produce a denial of service.

Recommendations For Cisco IOS, update to a version that includes the fix for this issue, and prior to deploying software, consult the maintenance provider or check the software for feature set compatibility and known issues specific to the environment. For Multiple Cisco products, update to a version that includes the fix for this issue, and prior to deploying software, consult the maintenance provider or check the software for feature set compatibility and known issues specific to the environment. As a temporary workaround, consider restricting the processing of IPSec IKE messages to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-3668

Affected Products

Cisco Asa

Cisco Ios

Cisco Wls

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-3668 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20051114-ipsec · Vendor Advisory
• http://niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3668 · Security Note
• http://ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp · Note
• http://jvn.jp/niscc/NISCC-273756/index.html · Note
• http://kb.cert.org/vuls/id/226364 · Note