MitreCVE-2005-3733CVE-2005-3733
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
96.7%
The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before release 6.4, and E-series routers before 7-1-0, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| juniper | junos_e | * | cpe:2.3:o:juniper:junos_e:*:*:*:*:*:*:*:* |
| juniper | junos_j | * | cpe:2.3:o:juniper:junos_j:*:*:*:*:*:*:*:* |
| juniper | junos_m | * | cpe:2.3:o:juniper:junos_m:*:*:*:*:*:*:*:* |
| juniper | junos_t | * | cpe:2.3:o:juniper:junos_t:*:*:*:*:*:*:*:* |
| juniper | junose_e | * | cpe:2.3:o:juniper:junose_e:*:*:*:*:*:*:*:* |
| juniper | junose_j | * | cpe:2.3:o:juniper:junose_j:*:*:*:*:*:*:*:* |
| juniper | junose_m | * | cpe:2.3:o:juniper:junose_m:*:*:*:*:*:*:*:* |
| juniper | junose_t | * | cpe:2.3:o:juniper:junose_t:*:*:*:*:*:*:*:* |
References
jvn.jp/niscc/NISCC-273756/index.html
secunia.com/advisories/17568
securitytracker.com/id?1015203
www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
www.kb.cert.org/vuls/id/226364
www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en
www.securityfocus.com/bid/15402
www.vupen.com/english/advisories/2005/2410
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
96.7%