Sun Solaris LibIKE IKE Exchange Denial Of Service Vulnerability

Bugtraq ID:	15420
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-3674
Remote:	Yes
Local:	No
Published:	Nov 14 2005 12:00AM
Updated:	Nov 14 2005 12:00AM
Credit:	This issue was reported by the vendor.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 10.0_x86 Sun Solaris 10
Not Vulnerable:

Sun Solaris LibIKE IKE Exchange Denial Of Service Vulnerability

Sun Solaris is prone to a denial of service vulnerability. This issue exists in the 'libike' IKE implementation and may impact the availability of the 'in.iked' daemon.

This issue was discovered with the PROTOS ISAKMP Test Suite and is related to handling of malformed IKEv1 traffic. This may be triggered by a remote privileged user.

Sun Solaris LibIKE IKE Exchange Denial Of Service Vulnerability

This issue can be reproduced using the PROTOS ISAKMP Test Suite.

Sun Solaris LibIKE IKE Exchange Denial Of Service Vulnerability

Solution:
Sun has released preliminary T-patches to address the vulnerability.


Sun Solaris 9_x86

• Sun T114435-09
  http://sunsolve.sun.com/tpatches

Sun Solaris 10

• Sun T118371-06
  http://sunsolve.sun.com/tpatches

Sun Solaris 10.0_x86

• Sun T118372-06
  http://sunsolve.sun.com/tpatches

Sun Solaris 9

• Sun T113451-10
  http://sunsolve.sun.com/tpatches

Sun Solaris LibIKE IKE Exchange Denial Of Service Vulnerability

References:

• Multiple Vulnerability Issues in Implementations of ISAKMP Protocol (NISCC)
  
• Sun Alert ID: 102040 - A Security Vulnerability in the "libike" Library May Affe (Sun)