CVE-2006-2298
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
93.8%
The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| internet_key_exchange | internet_key_exchange | 1 | cpe:2.3:a:internet_key_exchange:internet_key_exchange:1:*:*:*:*:*:*:* |
References
secunia.com/advisories/20050
securitytracker.com/id?1016043
sunsolve.sun.com/search/document.do?assetkey=1-26-102246-1
www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en
www.securityfocus.com/bid/17902
www.vupen.com/english/advisories/2006/1733
exchange.xforce.ibmcloud.com/vulnerabilities/26311
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
93.8%