Lucene search

MitreCVE-2006-3906

HistoryJul 27, 2006 - 10:04 p.m.

CVE-2006-3906

2006-07-2722:04:00

mitre

web.nvd.nist.gov

cve-2006-3906

internet key exchange

ikev1

cisco ios

vpn 3000 concentrators

pix firewalls

denial of service

resource exhaustion

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.6

Confidence

High

EPSS

0.059

Percentile

93.5%

JSON

Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.

Affected configurations

Nvd

Node

ciscoios

AND

ciscovpn_3001_concentrator

ciscovpn_3015_concentrator

ciscovpn_3020_concentrator

ciscovpn_3030_concentator

ciscovpn_3060_concentrator

ciscovpn_3080_concentrator

ciscoadaptive_security_appliance_softwareMatch7.0

ciscoadaptive_security_appliance_softwareMatch7.0\(4\)

ciscoadaptive_security_appliance_softwareMatch7.0\(5\)

ciscoadaptive_security_appliance_softwareMatch7.0.1.4

ciscoadaptive_security_appliance_softwareMatch7.0.4.3

ciscoadaptive_security_appliance_softwareMatch7.1\(2\)

ciscovpn_3000_concentrator_series_softwareMatch2.0

ciscovpn_3000_concentrator_series_softwareMatch2.5.2.a

ciscovpn_3000_concentrator_series_softwareMatch2.5.2.b

ciscovpn_3000_concentrator_series_softwareMatch2.5.2.c

ciscovpn_3000_concentrator_series_softwareMatch2.5.2.d

ciscovpn_3000_concentrator_series_softwareMatch2.5.2.f

ciscovpn_3000_concentrator_series_softwareMatch3.0

ciscovpn_3000_concentrator_series_softwareMatch3.0.3.a

ciscovpn_3000_concentrator_series_softwareMatch3.0.3.b

ciscovpn_3000_concentrator_series_softwareMatch3.0.4

ciscovpn_3000_concentrator_series_softwareMatch3.1

ciscovpn_3000_concentrator_series_softwareMatch3.1\(rel\)

ciscovpn_3000_concentrator_series_softwareMatch3.1.1

ciscovpn_3000_concentrator_series_softwareMatch3.1.2

ciscovpn_3000_concentrator_series_softwareMatch3.1.4

ciscovpn_3000_concentrator_series_softwareMatch3.5\(rel\)

ciscovpn_3000_concentrator_series_softwareMatch3.5.1

ciscovpn_3000_concentrator_series_softwareMatch3.5.2

ciscovpn_3000_concentrator_series_softwareMatch3.5.3

ciscovpn_3000_concentrator_series_softwareMatch3.5.4

ciscovpn_3000_concentrator_series_softwareMatch3.5.5

ciscovpn_3000_concentrator_series_softwareMatch3.6

ciscovpn_3000_concentrator_series_softwareMatch3.6.1

ciscovpn_3000_concentrator_series_softwareMatch3.6.3

ciscovpn_3000_concentrator_series_softwareMatch3.6.5

ciscovpn_3000_concentrator_series_softwareMatch3.6.7

ciscovpn_3000_concentrator_series_softwareMatch3.6.7.a

ciscovpn_3000_concentrator_series_softwareMatch3.6.7.b

ciscovpn_3000_concentrator_series_softwareMatch3.6.7.c

ciscovpn_3000_concentrator_series_softwareMatch3.6.7.d

ciscovpn_3000_concentrator_series_softwareMatch3.6.7.f

ciscovpn_3000_concentrator_series_softwareMatch3.6.7d

ciscovpn_3000_concentrator_series_softwareMatch4.0

ciscovpn_3000_concentrator_series_softwareMatch4.0.1

ciscovpn_3000_concentrator_series_softwareMatch4.0.2

ciscovpn_3000_concentrator_series_softwareMatch4.0.5.b

ciscovpn_3000_concentrator_series_softwareMatch4.1

ciscovpn_3000_concentrator_series_softwareMatch4.1.5.b

ciscovpn_3000_concentrator_series_softwareMatch4.1.7.a

ciscovpn_3000_concentrator_series_softwareMatch4.1.7.b

ciscovpn_3000_concentrator_series_softwareMatch4.1.7.l

ciscovpn_3000_concentrator_series_softwareMatch4.7

ciscovpn_3000_concentrator_series_softwareMatch4.7\(rel\)

ciscovpn_3000_concentrator_series_softwareMatch4.7.1

ciscovpn_3000_concentrator_series_softwareMatch4.7.1.f

ciscovpn_3000_concentrator_series_softwareMatch4.7.2

ciscovpn_3000_concentrator_series_softwareMatch4.7.2.a

ciscovpn_3000_concentrator_series_softwareMatch4.7.2.f

ciscovpn_3005_concentrator_softwareMatch4.0.1

ciscovpn_3030_concentatorMatch4.7\(rel\)

ciscovpn_3030_concentatorMatch4.7.1

ciscovpn_3030_concentatorMatch4.7.1.f

ciscovpn_3030_concentatorMatch4.7.2

ciscovpn_3030_concentatorMatch4.7.2.a

ciscovpn_3030_concentatorMatch4.7.2.f

AND

ciscopix_asa_ids

ciscopix_firewallMatch6.2.2_.111

ciscopix_firewallMatch6.2.3_\(110\)

ciscopix_firewallMatch6.3.3_\(133\)

ciscopix_firewallMatch6.3.5_\(112\)

ciscopix_firewall_501

ciscopix_firewall_506

ciscopix_firewall_515

ciscopix_firewall_515e

ciscopix_firewall_520

ciscopix_firewall_525

ciscopix_firewall_535

ciscosecure_pix_firewall

ciscopix_firewall_softwareMatch2.7

ciscopix_firewall_softwareMatch3.0

ciscopix_firewall_softwareMatch3.1

ciscopix_firewall_softwareMatch4.0

ciscopix_firewall_softwareMatch4.1\(6\)

ciscopix_firewall_softwareMatch4.1\(6b\)

ciscopix_firewall_softwareMatch4.2

ciscopix_firewall_softwareMatch4.2\(1\)

ciscopix_firewall_softwareMatch4.2\(2\)

ciscopix_firewall_softwareMatch4.2\(5\)

ciscopix_firewall_softwareMatch4.3

ciscopix_firewall_softwareMatch4.4

ciscopix_firewall_softwareMatch4.4\(4\)

ciscopix_firewall_softwareMatch4.4\(7.202\)

ciscopix_firewall_softwareMatch4.4\(8\)

ciscopix_firewall_softwareMatch5.0

ciscopix_firewall_softwareMatch5.1

ciscopix_firewall_softwareMatch5.1\(4\)

ciscopix_firewall_softwareMatch5.1\(4.206\)

ciscopix_firewall_softwareMatch5.2

ciscopix_firewall_softwareMatch5.2\(1\)

ciscopix_firewall_softwareMatch5.2\(2\)

ciscopix_firewall_softwareMatch5.2\(3.210\)

ciscopix_firewall_softwareMatch5.2\(5\)

ciscopix_firewall_softwareMatch5.2\(6\)

ciscopix_firewall_softwareMatch5.2\(7\)

ciscopix_firewall_softwareMatch5.2\(9\)

ciscopix_firewall_softwareMatch5.3

ciscopix_firewall_softwareMatch5.3\(1\)

ciscopix_firewall_softwareMatch5.3\(1.200\)

ciscopix_firewall_softwareMatch5.3\(2\)

ciscopix_firewall_softwareMatch5.3\(3\)

ciscopix_firewall_softwareMatch6.0

ciscopix_firewall_softwareMatch6.0\(1\)

ciscopix_firewall_softwareMatch6.0\(2\)

ciscopix_firewall_softwareMatch6.0\(3\)

ciscopix_firewall_softwareMatch6.0\(4\)

ciscopix_firewall_softwareMatch6.0\(4.101\)

ciscopix_firewall_softwareMatch6.1

ciscopix_firewall_softwareMatch6.1\(1\)

ciscopix_firewall_softwareMatch6.1\(2\)

ciscopix_firewall_softwareMatch6.1\(3\)

ciscopix_firewall_softwareMatch6.1\(4\)

ciscopix_firewall_softwareMatch6.1\(5\)

ciscopix_firewall_softwareMatch6.1.5\(104\)

ciscopix_firewall_softwareMatch6.2

ciscopix_firewall_softwareMatch6.2\(1\)

ciscopix_firewall_softwareMatch6.2\(2\)

ciscopix_firewall_softwareMatch6.2\(3\)

ciscopix_firewall_softwareMatch6.2\(3.100\)

ciscopix_firewall_softwareMatch6.3

ciscopix_firewall_softwareMatch6.3\(1\)

ciscopix_firewall_softwareMatch6.3\(2\)

ciscopix_firewall_softwareMatch6.3\(3\)

ciscopix_firewall_softwareMatch6.3\(3.102\)

ciscopix_firewall_softwareMatch6.3\(3.109\)

ciscopix_firewall_softwareMatch6.3\(5\)

VendorProductVersionCPE
ciscoios*cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*
ciscovpn_3001_concentrator*cpe:2.3:h:cisco:vpn_3001_concentrator:*:*:*:*:*:*:*:*
ciscovpn_3015_concentrator*cpe:2.3:h:cisco:vpn_3015_concentrator:*:*:*:*:*:*:*:*
ciscovpn_3020_concentrator*cpe:2.3:h:cisco:vpn_3020_concentrator:*:*:*:*:*:*:*:*
ciscovpn_3030_concentator*cpe:2.3:h:cisco:vpn_3030_concentator:*:*:*:*:*:*:*:*
ciscovpn_3060_concentrator*cpe:2.3:h:cisco:vpn_3060_concentrator:*:*:*:*:*:*:*:*
ciscovpn_3080_concentrator*cpe:2.3:h:cisco:vpn_3080_concentrator:*:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software7.0cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software7.0(4)cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(4\):*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software7.0(5)cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(5\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios	*	cpe:2.3:o:cisco:ios::::::::
cisco	vpn_3001_concentrator	*	cpe:2.3:h:cisco:vpn_3001_concentrator::::::::
cisco	vpn_3015_concentrator	*	cpe:2.3:h:cisco:vpn_3015_concentrator::::::::
cisco	vpn_3020_concentrator	*	cpe:2.3:h:cisco:vpn_3020_concentrator::::::::
cisco	vpn_3030_concentator	*	cpe:2.3:h:cisco:vpn_3030_concentator::::::::
cisco	vpn_3060_concentrator	*	cpe:2.3:h:cisco:vpn_3060_concentrator::::::::
cisco	vpn_3080_concentrator	*	cpe:2.3:h:cisco:vpn_3080_concentrator::::::::
cisco	adaptive_security_appliance_software	7.0	cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0:::::::*
cisco	adaptive_security_appliance_software	7.0(4)	cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(4\):::::::*
cisco	adaptive_security_appliance_software	7.0(5)	cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(5\):::::::*

Rows per page:

1-10 of 1381

References

archives.neohapsis.com/archives/bugtraq/2006-07/0531.html

securityreason.com/securityalert/1293

securitytracker.com/id?1016582

www.cisco.com/en/US/tech/tk583/tk372/tsd_technology_security_response09186a00806f33d4.html

www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html

www.osvdb.org/29068

www.securityfocus.com/archive/1/441203/100/0/threaded

www.securityfocus.com/bid/19176

exchange.xforce.ibmcloud.com/vulnerabilities/27972

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5299

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.6

Confidence

High

EPSS

0.059

Percentile

93.5%

JSON

Related for CVE-2006-3906