ISAKMPd/KAME/Racoon multiple bugs updated since 05.11.2003
Published:		17.12.2004
Source:		SECURITEAM
SecurityVulns ID:		3233
Type:		remote
Level:		5/10
Description:		Multiple bugs in RFC 2407-2409 realization.

Affected:		NETBSD : NetBSD 1.6
		OPENBSD : OpenBSD 3.3
		FREEBSD : FreeBSD 4.9
		ISAKMPD : isakmpd 2.1
		ISAKMPD : isakmpd 2.2
		OPENBSD : OpenBSD 3.4
		IPSECTOOLS : ipsec-tools 0.2
		OPENBSD : OpenBSD 3.5
		IPSECTOOLS : ipsec-tools 0.3
		OPENBSD : OpenBSD 3.6

Original document		SECUNIA, [SA13443] OpenBSD isakmpd Denial of Service Vulnerability (17.12.2004)
		GENTOO, [ GLSA 200406-17 ] IPsec-Tools: authentication bug in racoon (23.06.2004)
		Thomas Walpuski, unauthorized deletion of IPsec SAs in isakmpd, still (09.06.2004)
		RAPID7, R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities (24.03.2004)
		Thomas Walpuski, unauthorized deletion of IPsec (and ISAKMP) SAs in racoon (14.01.2004)
		Thomas Walpuski, Re: multiple payload handling flaws in isakmpd, again (03.01.2004)
		Thomas Walpuski, multiple payload handling flaws in isakmpd, again (03.01.2004)
		SECURITEAM, [NEWS] Multiple Payload Handling Flaws in ISAKMPd (05.11.2003)

Discuss:

Read or add your comments to this news (0 comments)