OpenBSD isakmpd IKE Payloads Denial Of Service Vulnerability

Bugtraq ID:	5589
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 05 2002 12:00AM
Updated:	Jul 05 2002 12:00AM
Credit:	This issue was reported by OpenBSD.
Vulnerable:	OpenBSD OpenBSD 3.1 OpenBSD OpenBSD 3.0
Not Vulnerable:

OpenBSD isakmpd IKE Payloads Denial Of Service Vulnerability

The IKE key management daemon (isakmpd) is prone to a denial of service condition. It is possible to trigger this condition by sending the daemon malformed IKE packets which contain out of sequence IKE payloads. This is reported to cause the daemon to crash.

This issue may be related to the multiple IKE implementation vulnerabilities described in CERT/CC Vulnerability Note VU#287771.

OpenBSD isakmpd IKE Payloads Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

OpenBSD isakmpd IKE Payloads Denial Of Service Vulnerability

Solution:
FreeBSD has included isakmpd in the ports collection. FreeBSD has released a Security Notice FreeBSD-SN-02:05 which addresses this issue. Users of FreeBSD
systems are strongly urged to upgrade their ports tree to fix various reported issues. Further information can be found in the referenced Security Notice.

Fixes are available:


OpenBSD OpenBSD 3.0

• OpenBSD 027_isakmpd.patch
  Source Code Patch.
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/027_isakmpd.patch

OpenBSD OpenBSD 3.1

• OpenBSD 010_isakmpd.patch
  Source Code Patch.
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/010_isakmpd.patch

OpenBSD isakmpd IKE Payloads Denial Of Service Vulnerability

References:

• Receiving IKE payloads out of sequence can cause isakmpd(8) to crash. (OpenBSD)
  
• Vulnerability Note VU#287771 (CERT/CC)