CVE-2005-3732

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-21 · updated 2026-06-16
Weakness: CWE-399

Description

The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

Affected products

Ipsec-Tools: 0.5, 0.5.1, 0.5.2, 0.6, 0.6.1, 0.6.2

References

http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html
http://cvs.sourceforge.net/viewcvs.py/ipsec-tools/ipsec-tools/src/racoon/isakmp_agg.c?r1=1.20.2.3&r2=1.20.2.4&diff_format=u
http://rhn.redhat.com/errata/RHSA-2006-0267.html
http://secunia.com/advisories/17668
http://secunia.com/advisories/17822
http://secunia.com/advisories/17980
http://secunia.com/advisories/18115
http://secunia.com/advisories/18616
http://secunia.com/advisories/18742
http://secunia.com/advisories/19833
http://secunia.com/advisories/20210

Get alerted when CVE-2005-3732 or the next vulnerability affects your stack