Cisco Internet Key Exchange Denial of Service Vulnerability
BID:19176
CVE-2006-3906 |Info
Cisco Internet Key Exchange Denial of Service Vulnerability
| Bugtraq ID: | 19176 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2006-3906 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 26 2006 12:00AM |
| Updated: | Jul 28 2008 10:37PM |
| Credit: | NTA Monitor is credited with the discovery of this vulnerability. |
| Vulnerable: |
Cisco VPN 3080 Concentrator 4.7.2 F Cisco VPN 3080 Concentrator 4.7.2 A Cisco VPN 3080 Concentrator 4.7.2 A Cisco VPN 3080 Concentrator 4.7.1 F Cisco VPN 3080 Concentrator 4.7.1 Cisco VPN 3080 Concentrator 4.7 Cisco VPN 3080 Concentrator 4.1.7 L Cisco VPN 3080 Concentrator 4.7 REL Cisco VPN 3080 Concentrator Cisco VPN 3060 Concentrator 4.7.2 A Cisco VPN 3060 Concentrator 4.7.2 A Cisco VPN 3060 Concentrator 4.7.2 Cisco VPN 3060 Concentrator 4.7.1 F Cisco VPN 3060 Concentrator 4.7.1 Cisco VPN 3060 Concentrator 4.7 Cisco VPN 3060 Concentrator 3.5.2 Cisco VPN 3060 Concentrator 4.7 REL Cisco VPN 3060 Concentrator Cisco VPN 3030 Concentrator 4.7.2 F Cisco VPN 3030 Concentrator 4.7.2 A Cisco VPN 3030 Concentrator 4.7.2 Cisco VPN 3030 Concentrator 4.7.1 F Cisco VPN 3030 Concentrator 4.7.1 Cisco VPN 3030 Concentrator 4.7 Cisco VPN 3030 Concentrator 4.1.7 L Cisco VPN 3030 Concentrator 4.0.2 Cisco VPN 3030 Concentrator 4.0.2 Cisco VPN 3030 Concentrator 4.7 REL Cisco VPN 3030 Concentrator Cisco VPN 3020 Concentrator 4.7.2 F Cisco VPN 3020 Concentrator 4.7.2 A Cisco VPN 3020 Concentrator 4.7.2 Cisco VPN 3020 Concentrator 4.7.1 F Cisco VPN 3020 Concentrator 4.7.1 Cisco VPN 3020 Concentrator 4.7 Cisco VPN 3020 Concentrator 4.1.7 L Cisco VPN 3020 Concentrator 4.7 REL Cisco VPN 3020 Concentrator Cisco VPN 3015 Concentrator 4.7.2 F Cisco VPN 3015 Concentrator 4.7.2 A Cisco VPN 3015 Concentrator 4.7.2 Cisco VPN 3015 Concentrator 4.7.1 F Cisco VPN 3015 Concentrator 4.7.1 Cisco VPN 3015 Concentrator 4.7 Cisco VPN 3015 Concentrator 4.1.7 L Cisco VPN 3015 Concentrator 4.7 REL Cisco VPN 3015 Concentrator Cisco VPN 3005 Concentrator 4.7.2 F Cisco VPN 3005 Concentrator 4.7.2 A Cisco VPN 3005 Concentrator 4.7.2 Cisco VPN 3005 Concentrator 4.7.1 F Cisco VPN 3005 Concentrator 4.7.1 Cisco VPN 3005 Concentrator 4.7 Cisco VPN 3005 Concentrator 4.1.7 L Cisco VPN 3005 Concentrator 4.0.1 Cisco VPN 3005 Concentrator 4.0 Cisco VPN 3005 Concentrator 3.6.7 F Cisco VPN 3005 Concentrator 3.6.7 D Cisco VPN 3005 Concentrator 3.6.7 C Cisco VPN 3005 Concentrator 3.6.7 B Cisco VPN 3005 Concentrator 3.6.7 A Cisco VPN 3005 Concentrator 3.6.7 Cisco VPN 3005 Concentrator 3.6.5 Cisco VPN 3005 Concentrator 3.6.3 Cisco VPN 3005 Concentrator 4.7 REL Cisco VPN 3001 Concentrator 0 Cisco VPN 3000 Concentrator 4.7.1 F Cisco VPN 3000 Concentrator 4.7.1 Cisco VPN 3000 Concentrator 4.7 Cisco VPN 3000 Concentrator 4.1.5 .B Cisco VPN 3000 Concentrator 4.1 .x Cisco VPN 3000 Concentrator 4.0.5 .B Cisco VPN 3000 Concentrator 4.0.1 Cisco VPN 3000 Concentrator 4.0 .x Cisco VPN 3000 Concentrator 4.0 Cisco VPN 3000 Concentrator 3.6.7 D Cisco VPN 3000 Concentrator 3.6.7 Cisco VPN 3000 Concentrator 3.6.1 Cisco VPN 3000 Concentrator 3.6 Cisco VPN 3000 Concentrator 3.5.5 Cisco VPN 3000 Concentrator 3.5.4 Cisco VPN 3000 Concentrator 3.5.3 Cisco VPN 3000 Concentrator 3.5.2 Cisco VPN 3000 Concentrator 3.5.1 Cisco VPN 3000 Concentrator 3.5 (Rel) Cisco VPN 3000 Concentrator 3.1.4 Cisco VPN 3000 Concentrator 3.1.2 Cisco VPN 3000 Concentrator 3.1.1 Cisco VPN 3000 Concentrator 3.1 (Rel) Cisco VPN 3000 Concentrator 3.1 Cisco VPN 3000 Concentrator 3.0.4 Cisco VPN 3000 Concentrator 3.0.3 (B) Cisco VPN 3000 Concentrator 3.0.3 (A) Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 2.5.2 (F) Cisco VPN 3000 Concentrator 2.5.2 (D) Cisco VPN 3000 Concentrator 2.5.2 (C) Cisco VPN 3000 Concentrator 2.5.2 (B) Cisco VPN 3000 Concentrator 2.5.2 (A) Cisco VPN 3000 Concentrator 2.0 Cisco VPN 3000 Concentrator 4.1.7.B Cisco VPN 3000 Concentrator 4.1.7.A Cisco Secure PIX Firewall Cisco PIX/ASA IDS 0 Cisco PIX/ASA 7.0.4 .3 Cisco PIX/ASA 7.0.4 Cisco PIX/ASA 7.0.1 .4 Cisco PIX/ASA 7.0 Cisco PIX/ASA 7.1(2) Cisco PIX/ASA 7.0(5) Cisco PIX Firewall 535 0 Cisco PIX Firewall 525 6.3 Cisco PIX Firewall 525 Cisco PIX Firewall 520 Cisco PIX Firewall 515E Cisco PIX Firewall 515 Cisco PIX Firewall 506 0 Cisco PIX Firewall 501 0 Cisco PIX Firewall 6.3.5 (112) Cisco PIX Firewall 6.3.3 (133) Cisco PIX Firewall 6.3.2 Cisco PIX Firewall 6.3.1 Cisco PIX Firewall 6.3 (5) Cisco PIX Firewall 6.3 (3.109) Cisco PIX Firewall 6.3 (3.102) Cisco PIX Firewall 6.3 (3) Cisco PIX Firewall 6.3 (1) Cisco PIX Firewall 6.3 Cisco PIX Firewall 6.2.3 (110) Cisco PIX Firewall 6.2.3 Cisco PIX Firewall 6.2.2 .111 Cisco PIX Firewall 6.2.2 Cisco PIX Firewall 6.2.1 Cisco PIX Firewall 6.2 (3.100) Cisco PIX Firewall 6.2 (3) Cisco PIX Firewall 6.2 (2) Cisco PIX Firewall 6.2 (1) Cisco PIX Firewall 6.2 Cisco PIX Firewall 6.1.5 (104) Cisco PIX Firewall 6.1.5 Cisco PIX Firewall 6.1.4 Cisco PIX Firewall 6.1.3 Cisco PIX Firewall 6.1 (5) Cisco PIX Firewall 6.1 (4) Cisco PIX Firewall 6.1 (3) Cisco PIX Firewall 6.1 (2) Cisco PIX Firewall 6.1 (1) Cisco PIX Firewall 6.1 Cisco PIX Firewall 6.0.4 Cisco PIX Firewall 6.0.3 Cisco PIX Firewall 6.0 (4.101) Cisco PIX Firewall 6.0 (4) Cisco PIX Firewall 6.0 (2) Cisco PIX Firewall 6.0 (1) Cisco PIX Firewall 6.0 Cisco PIX Firewall 5.3 (3) Cisco PIX Firewall 5.3 (2) Cisco PIX Firewall 5.3 (1.200) Cisco PIX Firewall 5.3 (1) Cisco PIX Firewall 5.3 Cisco PIX Firewall 5.2 (9) Cisco PIX Firewall 5.2 (7) Cisco PIX Firewall 5.2 (6) Cisco PIX Firewall 5.2 (5) Cisco PIX Firewall 5.2 (3.210) Cisco PIX Firewall 5.2 (2) Cisco PIX Firewall 5.2 (1) Cisco PIX Firewall 5.2 Cisco PIX Firewall 5.1.4 Cisco PIX Firewall 5.1 (4.206) Cisco PIX Firewall 5.1 Cisco PIX Firewall 5.0 Cisco PIX Firewall 4.4 (8) Cisco PIX Firewall 4.4 (7.202) Cisco PIX Firewall 4.4 (4) Cisco PIX Firewall 4.4 Cisco PIX Firewall 4.3 Cisco PIX Firewall 4.2.2 Cisco PIX Firewall 4.2.1 Cisco PIX Firewall 4.2 (5) Cisco PIX Firewall 4.2 Cisco PIX Firewall 4.1.6 b Cisco PIX Firewall 4.1.6 Cisco PIX Firewall 4.0 Cisco PIX Firewall 3.1 Cisco PIX Firewall 3.0 Cisco PIX Firewall 2.7 Cisco IOS 0 Cisco Gigabit Switch Router 6.1 del |
| Not Vulnerable: | |
Discussion
Cisco Internet Key Exchange Denial of Service Vulnerability
Cisco Internet Key Exchange (IKE) is prone to a denial-of-service vulnerability that affects devices implementing IKE 1. The issue is caused by resource exhaustion when handling a high rate of IKE requests.
An attacker can exploit this issue through continuous attacks to deplete available resources. This will cause the device to deny future connections and to block current connections that are re-keyed.
Cisco Internet Key Exchange (IKE) is prone to a denial-of-service vulnerability that affects devices implementing IKE 1. The issue is caused by resource exhaustion when handling a high rate of IKE requests.
An attacker can exploit this issue through continuous attacks to deplete available resources. This will cause the device to deny future connections and to block current connections that are re-keyed.
Exploit / POC
Cisco Internet Key Exchange Denial of Service Vulnerability
Attackers use readily available network utilities to create and send malicious packets sufficient to exploit this issue.
Attackers use readily available network utilities to create and send malicious packets sufficient to exploit this issue.
Solution / Fix
Cisco Internet Key Exchange Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Cisco Internet Key Exchange Denial of Service Vulnerability
References:
References: