HP-UX IKE Exchange Denial Of Service Vulnerabilities

Bugtraq ID:	15474
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-3670
Remote:	Yes
Local:	No
Published:	Nov 16 2005 12:00AM
Updated:	Nov 16 2005 12:00AM
Credit:	Discovery is credited to NISCC, CERT-FI, and the Oulu University Secure Programming Group.
Vulnerable:	HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.11 HP HP-UX B.11.00
Not Vulnerable:

HP-UX IKE Exchange Denial Of Service Vulnerabilities

HP-UX is prone to denial of service vulnerabilities. These issues are due to security flaws in HP's IPSec implementation. These vulnerabilities may be triggered by malformed IKE traffic.

This issue was discovered with the PROTOS ISAKMP Test Suite and is related to the handling of malformed IKEv1 traffic.

HP-UX IKE Exchange Denial Of Service Vulnerabilities

These issues can be reproduced using the PROTOS ISAKMP Test Suite.

HP-UX IKE Exchange Denial Of Service Vulnerabilities

Solution:
The vendor has released advisory HPSBUX02076 SSRT5979 to address this issue. Please see the referenced advisory for further information on obtaining fixes.

HP-UX IKE Exchange Denial Of Service Vulnerabilities

References:

• HP-UX Homepage (HP)
  
• HPSBUX02076 SSRT5979 - HP-UX Running IPSec Remote Denial of Service (DoS) (HP)
  
• Multiple Vulnerability Issues in Implementations of ISAKMP Protocol (NISCC)