APANI Networks EpiForce Agent Denial Of Service Vulnerability

Bugtraq ID:	15797
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 10 2005 12:00AM
Updated:	Dec 10 2005 12:00AM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	Apani Networks Corporation EpiForce Agent 1.9
Not Vulnerable:	Apani Networks Corporation EpiForce Agent 2.0

APANI Networks EpiForce Agent Denial Of Service Vulnerability

EpiForce Agent is prone to a denial of service vulnerability.

Unspecified PROTOS protocol tests will crash the IKE Negotiation Module of the Epiforce Agent application. This will cause the Epiforce application to crash, effectively denying service to legitimate users, until the service is automatically restarted.

No further details regarding this vulnerability are known. This BID will be updated when details become available.

APANI Networks EpiForce Agent Denial Of Service Vulnerability

No exploit is required.

APANI Networks EpiForce Agent Denial Of Service Vulnerability

Solution:
The vendor has released version 2.0 to address this issue.

APANI Networks EpiForce Agent Denial Of Service Vulnerability

References:

• Apani Networks Corporation Epiforce Web Site (Apani Networks Corporation)
  
• Multiple Vulnerability Issues in Implementations of ISAKMP Protocol (NISCC)
  
• Apani Network Response to ISAKMP cert-fi:7710 Alert (Apani Networks Corporation)