CVE		CVE-2008-3652
Status		Candidate
Description		src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).
Phase		Assigned (12.08.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3652
References		APPLE : APPLE-SA-2009-05-12
		APPLE : APPLE-SA-2009-06-17-1
		BID : 30657
		CERT : TA09-133A
		CONFIRM : http://support.apple.com/kb/HT3549
		CONFIRM : http://support.apple.com/kb/HT3639
		GENTOO : GLSA-200812-03
		MANDRIVA : MDVSA-2008:181
		MLIST : [ipsec-tools-devel] 20080811 [PATCH] Track and delete orphaned ph1s
		OVAL : oval:org.mitre.oval:def:10448
		REDHAT : RHSA-2008:0849
		SECTRACK : 1020692
		SECUNIA : 31478
		SECUNIA : 31624
		SECUNIA : 32759
		SECUNIA : 32971
		SECUNIA : 35074
		SUSE : SUSE-SR:2008:025
		SUSE : SUSE-SR:2009:004
		UBUNTU : USN-641-1
		VUPEN : ADV-2008-2378
		VUPEN : ADV-2008-2844
		VUPEN : ADV-2009-1297
		VUPEN : ADV-2009-1621
		XF : ipsectools-orphanedph1-dos(44424)
SecurityVulns:		ipsec-tools / racoon IPSec DoS
		Apple Mac OS X multiple security vulnerabilities