Nortel Switched Firewall IKE Traffic Multiple Unspecified Vulnerabilities

Bugtraq ID:	15462
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Nov 16 2005 12:00AM
Updated:	Nov 16 2005 12:00AM
Credit:	Discovery is credited to NISCC, CERT-FI, and the Oulu University Secure Programming Group.
Vulnerable:	Nortel Networks Switched Firewall 6000 series Nortel Networks Switched Firewall 5100 series Nortel Networks Switched Firewall 5000 series Nortel Networks Alteon Switched Firewall 5100
Not Vulnerable:

Nortel Switched Firewall IKE Traffic Multiple Unspecified Vulnerabilities

Nortel Switched Firewall is prone to multiple unspecified vulnerabilities in IKEv1.

Some of the issues could potentially allow for remote code execution and complete compromise of affected devices. This has not been confirmed.

These issues were discovered with the PROTOS ISAKMP Test Suite and are related to handling of malformed IKEv1 traffic.

Nortel Switched Firewall IKE Traffic Multiple Unspecified Vulnerabilities

These issues can be reproduced using the PROTOS ISAKMP Test Suite. It should be noted that the Test Suite may trigger the vulnerabilities but is not designed to exploit the buffer overflow issues to execute arbitrary code.

Nortel Switched Firewall IKE Traffic Multiple Unspecified Vulnerabilities

Solution:
The vendor has released an advisory and fixes to address these issues. Please see the referenced advisory for further information on obtaining fixes.

Nortel Switched Firewall IKE Traffic Multiple Unspecified Vulnerabilities

References:

• Multiple Vulnerability Issues in Implementation of ISAKMP protocol[ (Nortel Networks)
  
• Multiple Vulnerability Issues in Implementations of ISAKMP Protocol (NISCC)