Multiple Fortinet Products IKE Exchange Denial Of Service Vulnerabilities

Bugtraq ID:	15997
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 08 2005 12:00AM
Updated:	Dec 08 2005 12:00AM
Credit:	Discovery is credited to NISCC, CERT-FI, and the Oulu University Secure Programming Group.
Vulnerable:	Fortinet FortiOS 3.0 Fortinet FortiOS 2.80 Fortinet FortiOS 2.50 Fortinet FortiManager 3.0 Fortinet FortiManager 2.80 Fortinet FortiClient 2.0
Not Vulnerable:

Multiple Fortinet Products IKE Exchange Denial Of Service Vulnerabilities

Fortinet FortiGate, FortiManager, and FortiClient products are prone to denial of service vulnerabilities. These issues are due to security flaws in Fortinet's IPSec implementation. These vulnerabilities may be triggered by malformed IKE traffic.

This issue was discovered with the PROTOS ISAKMP Test Suite and is related to the handling of malformed IKEv1 traffic.

Multiple Fortinet Products IKE Exchange Denial Of Service Vulnerabilities

These issues can be reproduced using the PROTOS ISAKMP Test Suite.

Multiple Fortinet Products IKE Exchange Denial Of Service Vulnerabilities

Solution:
The vendor has released an advisory, along with fixes to address these issues. Please see the referenced advisory for further information on obtaining fixes.

Multiple Fortinet Products IKE Exchange Denial Of Service Vulnerabilities

References:

• Advisory - IKE ISAKMP (VU#226364) vulnerabilities (Fortinet)
  
• Fortinet Homepage (Fortinet)
  
• Multiple Vulnerability Issues in Implementations of ISAKMP Protocol (NISCC)