PT-2006-4752 · Cisco · Vpn 3000 Concentrators+3

Roy Hills · Published 2006-07-26 · Updated 2024-07-02 · CVE-2006-3906

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions (affected versions not specified) VPN 3000 Concentrators versions (affected versions not specified) PIX firewalls versions (affected versions not specified)

Description The issue concerns the Internet Key Exchange (IKE) version 1 protocol, which is used for key exchange in IPSec, commonly utilized to encrypt data for VPN connections. A design weakness in the IKE version 1 protocol allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. This could potentially affect multiple products and implementations beyond Cisco's.

Recommendations For Cisco IOS, consider implementing rate limiting on IKE Phase-1 packets to minimize the risk of resource exhaustion. For VPN 3000 Concentrators, restrict access to IKE Phase-1 packets until a more robust solution is available. For PIX firewalls, as a temporary workaround, consider disabling IKE version 1 protocol support until a patch or update is provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-3906

Affected Products

Cisco Asa

Cisco Ios

Pix Firewalls

Vpn 3000 Concentrators

References · 12

• http://cisco.com/en/US/tech/tk583/tk372/tsd_technology_security_response09186a00806f33d4.html · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20060726-CVE-2006-3906 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3906 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5299 · Note
• http://archives.neohapsis.com/archives/bugtraq/2006-07/0531.html · Note
• http://osvdb.org/29068 · Note
• http://securityfocus.com/bid/19176 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27972 · Note
• http://securitytracker.com/id?1016582 · Note
• http://nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html · Note
• http://securityfocus.com/archive/1/441203/100/0/threaded · Note
• http://securityreason.com/securityalert/1293 · Note