Unscored severity · published Apr 6, 2006
CVE-2006-1646
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x before 20060119, certain FreeBSD…
–
CVSS
2.4%
EPSS
No
On KEV
Description
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x before 20060119, certain FreeBSD releases, and possibly other distributions of BSD or Linux operating systems, when running in aggressive mode, allows remote attackers to cause a denial of service (daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IK
Internet Key Exchange · Internet Key Exchange
1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1646
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1646
mail-index.netbsd.org
http://mail-index.netbsd.org/source-changes/2006/01/19/0017.html
Vendor Advisory
http://secunia.com/advisories/19463
www.ee.oulu.fi
http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
www.niscc.gov.uk
http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en
More from Internet Key Exchange
–
CVE-2006-2298
The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked daemon crash)…
–
CVE-2005-3666
Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and…
–
CVE-2005-3667
Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts…
–
CVE-2005-3668
Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial…