PT-2007-1024 · Unknown+1 · Ipsec-Tools+1

Published 2007-04-10 · Updated 2017-10-11 · CVE-2007-1841

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: ipsec-tools versions prior to 0.6.7

Description: The issue affects the ipsec-tools package, allowing remote attackers to cause a denial of service, leading to disruption of protected information. This can be achieved through crafted messages, specifically DELETE (ISAKMP NPTYPE D) and NOTIFY (ISAKMP NPTYPE N) messages, exploiting the isakmp info recv function in src/racoon/isakmp inf.c in racoon.

Recommendations: For versions prior to 0.6.7, update to version 0.6.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the isakmp info recv function in src/racoon/isakmp inf.c until a patch is available. Additionally, limiting the handling of DELETE (ISAKMP NPTYPE D) and NOTIFY (ISAKMP NPTYPE N) messages can help minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-02831

BDU:2015-09571

CVE-2007-1841

DSA-1299-1

DTSA-42-1

RHSA-2007:0342

RHSA-2007_0342

Affected Products

Red Hat

Ipsec-Tools

References · 27

• https://rhn.redhat.com/errata/RHSA-2007-0342.html · Vendor Advisory
• http://debian.org/security/2007/dsa-1299 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200705-09.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02831 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2007-1841 · Security Note
• http://sourceforge.net/mailarchive/message.php?msg_name=20070406123739.GA1546%40zen.inc · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:084 · Vendor Advisory
• http://ubuntu.com/usn/usn-450-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09571 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1841 · Security Note
• http://secunia.com/advisories/24815 · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_8_sr.html · Vendor Advisory
• http://secunia.com/advisories/25142 · Note
• http://secunia.com/advisories/25322 · Note
• http://secunia.com/advisories/24833 · Note