CVE-2003-1320 SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including....
MediumCVSS 5.1
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SonicWall firmware | <= 6.4.0.1 | No fix listed |
References
- VU#287771 third-party-advisory us-government-resource
- www.kb.cert.org