Stonesoft StoneGate Firewall/VPN Client IKEv1 Traffic Multiple Unspecified Vulnerabilities
BID:15405
Info
Stonesoft StoneGate Firewall/VPN Client IKEv1 Traffic Multiple Unspecified Vulnerabilities
| Bugtraq ID: | 15405 |
| Class: | Unknown |
| CVE: |
CVE-2005-3672 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 14 2005 12:00AM |
| Updated: | Nov 14 2005 12:00AM |
| Credit: | Discovery is credited to NISCC, CERT-FI, and the Oulu University Secure Programming Group. |
| Vulnerable: |
Stonesoft StoneGate VPN Client 2.6 Stonesoft StoneGate VPN Client 2.0.9 Stonesoft StoneGate VPN Client 2.0.8 Stonesoft StoneGate VPN Client 2.0.7 Stonesoft StoneGate VPN Client 2.0 Stonesoft StoneGate VPN Client 1.7.2 Stonesoft StoneGate VPN Client 1.7 Stonesoft StoneGate High Availability Firewall and VPN 2.6 Stonesoft StoneGate High Availability Firewall and VPN 2.0.8 Stonesoft StoneGate High Availability Firewall and VPN 2.0 Stonesoft StoneGate High Availability Firewall and VPN 1.7 |
| Not Vulnerable: |
Stonesoft StoneGate VPN Client 2.6.1 Stonesoft StoneGate High Availability Firewall and VPN 2.6.3 |
Discussion
Stonesoft StoneGate Firewall/VPN Client IKEv1 Traffic Multiple Unspecified Vulnerabilities
Stonesoft StoneGate Firewall and VPN Client are prone to multiple unspecified vulnerabilities in its IKEv1 implementation. Potential issues include denial of service attacks, format strings, and buffer overflows.
These issues were discovered with the PROTOS ISAKMP Test Suite and are related to handling of malformed IKEv1 traffic.
Stonesoft StoneGate Firewall and VPN Client are prone to multiple unspecified vulnerabilities in its IKEv1 implementation. Potential issues include denial of service attacks, format strings, and buffer overflows.
These issues were discovered with the PROTOS ISAKMP Test Suite and are related to handling of malformed IKEv1 traffic.
Exploit / POC
Stonesoft StoneGate Firewall/VPN Client IKEv1 Traffic Multiple Unspecified Vulnerabilities
These issues can be reproduced using the PROTOS ISAKMP Test Suite. It should be noted that the Test Suite may trigger the vulnerabilities but is not designed to exploit the format string and buffer overflow issues to execute arbitrary code.
These issues can be reproduced using the PROTOS ISAKMP Test Suite. It should be noted that the Test Suite may trigger the vulnerabilities but is not designed to exploit the format string and buffer overflow issues to execute arbitrary code.
Solution / Fix
Stonesoft StoneGate Firewall/VPN Client IKEv1 Traffic Multiple Unspecified Vulnerabilities
Solution:
Stonesoft has released StoneGate Firewall/VPN Engine, and VPN Client 2.6.1 versions to address these issues.
Solution:
Stonesoft has released StoneGate Firewall/VPN Engine, and VPN Client 2.6.1 versions to address these issues.
References
Stonesoft StoneGate Firewall/VPN Client IKEv1 Traffic Multiple Unspecified Vulnerabilities
References:
References: