PT-2005-5539 · Freebsd+2 · Freebsd+4

Adrianp · Published 2005-11-14 · Updated 2008-09-05 · CVE-2006-1646

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: NetBSD versions 1.6, 2.x before 20060119 Certain FreeBSD releases Possibly other distributions of BSD or Linux operating systems

Description: The issue allows remote attackers to cause a denial of service via crafted IKE packets. This can be repeatedly exploited to produce a denial of service. The vulnerability was identified by the University of Oulu Secure Programming Group (OUSPG) "PROTOS" Test Suite for IPSec.

Recommendations: For NetBSD versions 1.6, 2.x before 20060119, consider updating to a version after 20060119 to address the issue. For certain FreeBSD releases, update to a release that includes the fix for this issue. For possibly other distributions of BSD or Linux operating systems, check with the distribution provider for an update that addresses this issue. As a temporary workaround, consider restricting the use of IKE packets to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-1646

Affected Products

Cisco Asa

Cisco Ios

Cisco Wls

Freebsd

Netbsd

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-1646 · Security Note
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-003.txt.asc · Vendor Advisory
• http://secunia.com/advisories/19463 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1646 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20051114-ipsec · Vendor Advisory
• http://ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp · Note
• http://mail-index.netbsd.org/source-changes/2006/01/19/0017.html · Note
• http://niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en · Note