Symantec Dynamic VPN Services IKE Traffic Denial Of Service Vulnerabilities
BID:15516
Info
Symantec Dynamic VPN Services IKE Traffic Denial Of Service Vulnerabilities
| Bugtraq ID: | 15516 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 21 2005 12:00AM |
| Updated: | Nov 21 2005 12:00AM |
| Credit: | Discovery is credited to NISCC, CERT-FI, and the Oulu University Secure Programming Group. |
| Vulnerable: |
Symantec Gateway Security 5400 2.0.1 Symantec Gateway Security 5310 1.0 Symantec Gateway Security 5300 1.0 Symantec Gateway Security 5200 1.0 Symantec Gateway Security 5100 Symantec Gateway Security 5000 Series 3.0 Symantec Gateway Security 400 2.0 Symantec Gateway Security 300 2.0 Symantec Firewall/VPN Appliance 200R Symantec Firewall/VPN Appliance 200 Symantec Firewall/VPN Appliance 100 Symantec Enterprise Firewall 8.0 Solaris Symantec Enterprise Firewall 8.0 NT/2000 |
| Not Vulnerable: |
Symantec Clientless VPN Gateway 4400 Series 5.0 |
Discussion
Symantec Dynamic VPN Services IKE Traffic Denial Of Service Vulnerabilities
Various Symantec products are prone to denial of service attacks. These issues are due to a failure of the product's IPSec implementation to properly handle malformed IKE packets.
Successful attacks will cause the ISAKMP service to crash, denying service to dynamic VPN tunnels.
Various Symantec products are prone to denial of service attacks. These issues are due to a failure of the product's IPSec implementation to properly handle malformed IKE packets.
Successful attacks will cause the ISAKMP service to crash, denying service to dynamic VPN tunnels.
Exploit / POC
Symantec Dynamic VPN Services IKE Traffic Denial Of Service Vulnerabilities
These issues can be reproduced with the PROTOS IPSec Test Suite.
These issues can be reproduced with the PROTOS IPSec Test Suite.
Solution / Fix
Symantec Dynamic VPN Services IKE Traffic Denial Of Service Vulnerabilities
Solution:
Symantec has released an advisory, along with fixes to address this issue. Symantec has made the fixes available via the Symantec Enterprise Support site. Please see the referenced advisory for further information.
Solution:
Symantec has released an advisory, along with fixes to address this issue. Symantec has made the fixes available via the Symantec Enterprise Support site. Please see the referenced advisory for further information.
References
Symantec Dynamic VPN Services IKE Traffic Denial Of Service Vulnerabilities
References:
References: