Vulnerability in Internet Key Exchange
CVE-2005-3666
Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.
EPSS: 0.035 (87.9th percentile) — read the EPSS interpretation.
Affected products
- Internet_key_exchange — versions 1
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2005-3666?
- CVE-2005-3666 is a vulnerability in Internet Key Exchange. Published 2005-11-18.
- Is CVE-2005-3666 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.