Unscored severity · published Nov 18, 2005
CVE-2005-3666
Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and…
–
CVSS
3.4%
EPSS
No
On KEV
Description
Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IK
Internet Key Exchange · Internet Key Exchange
1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3666
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3666
jvn.jp
http://jvn.jp/niscc/NISCC-273756/index.html
www.ee.oulu.fi
http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
Third Party Advisory
http://www.kb.cert.org/vuls/id/226364
Vendor Advisory
http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en
More from Internet Key Exchange
–
CVE-2006-2298
The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked daemon crash)…
–
CVE-2006-1646
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x before 20060119, certain FreeBSD…
–
CVE-2005-3667
Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts…
–
CVE-2005-3668
Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial…