Vulnerability in Internet Key Exchange
CVE-2005-3667
Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable. In addition, since "denial of service" is an impact and not a vulnerability, it is unknown which underlying vulnerabilities are actually covered by this particular candidate.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.024 (83.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 84th percentile — 83.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.024 · newest: 0.024 · change: 0.000
Affected products
- Internet Key Exchange — versions 1
Public proof-of-concept exploits
References
- www.niscc.gov.uk/niscc/docs/br-20051114-01013.html (Vendor Advisory)
- jvn.jp/niscc/NISCC-273756/index.html
- www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
- www.kb.cert.org/vuls/id/226364 (US Government Resource, Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2005-3667?
- CVE-2005-3667 is a vulnerability in Internet Key Exchange. Published 2005-11-18.
- Is CVE-2005-3667 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.