Vulnerability in Cisco Adaptive_security_appliance_software
CVE-2006-3906
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exce…
EPSS: 0.067 (93.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco Adaptive_security_appliance_software — versions 7.0, 7.0\(4\), 7.0\(5\)
- Cisco Ios
- Cisco Pix_asa_ids
- Cisco Pix_firewall — versions 6.2.2_.111, 6.2.3_\(110\), 6.3.3_\(133\)
- Cisco Pix_firewall_501
- Cisco Pix_firewall_506
- Cisco Pix_firewall_515
- Cisco Pix_firewall_515e
- Cisco Pix_firewall_520
- Cisco Pix_firewall_525
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)