NetSight
IP …
medium5.0

CVE-2006-3906

Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a deni…

Impact

Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.

Affected products

VendorProductAffected versions
CiscoIos
All versions
CiscoVpn 3001 Concentrator
All versions
CiscoVpn 3015 Concentrator
All versions
CiscoVpn 3020 Concentrator
All versions
CiscoVpn 3030 Concentator
All versions
Versions 4.7\(rel\), 4.7.1, 4.7.1.f, 4.7.2, 4.7.2.a
CiscoVpn 3060 Concentrator
All versions
CiscoVpn 3080 Concentrator
All versions
CiscoAdaptive Security Appliance Software
Versions 7.0, 7.0\(4\), 7.0\(5\), 7.0.1.4, 7.0.4.3, 7.1\(2\)
CiscoVpn 3000 Concentrator Series Software
Versions 2.0, 2.5.2.a, 2.5.2.b, 2.5.2.c, 2.5.2.d, 2.5.2.f
CiscoVpn 3005 Concentrator Software
Version 4.0.1
CiscoPix Asa Ids
All versions
CiscoPix Firewall
Versions 6.2.2_.111, 6.2.3_\(110\), 6.3.3_\(133\), 6.3.5_\(112\)

References