medium5.0

CVE-2005-3669

Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a…

Impact

Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the Cisco advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.

Affected products

Vendor	Product	Affected versions
Cisco	Firewall Services Module	All versions Versions 1.1.2, 1.1.3, 1.1_\(3.005\), 2.1_\(0.208\)
Cisco	Vpn 3000 Concentrator Series Software	Versions 2.0, 2.5.2.a, 2.5.2.b, 2.5.2.c, 2.5.2.d, 2.5.2.f
Cisco	Ios	Versions 12.2sxd, 12.3t, 12.3tpc, 12.3xd, 12.3xe, 12.3xf
Cisco	Adaptive Security Appliance Software	Version 7.0
Cisco	Pix Firewall	Versions 6.2.2_.111, 6.2.3_\(110\), 6.3.3_\(133\)
Cisco	Mds 9000	All versions
Cisco	Mds 9000 San-Os	Versions 1.3\(3.33\), 1.3\(4a\), 2.0\(0.86\)
Cisco	Pix Firewall Software	Versions 2.7, 3.0, 3.1, 4.0, 4.1\(6\), 4.1\(6b\)

Impact

Affected products

References