CVE-2005-3733 The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before release 6.4, and E-series routers before 7-1-0, allows remote atta...
HighCVSS 7.5
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before release 6.4, and E-series routers before 7-1-0, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper junos e | <= 7.0.0 | No fix listed |
| juniper junos j | <= 6.3 | No fix listed |
| juniper junos m | <= 6.3 | No fix listed |
| juniper junos t | <= 6.3 | No fix listed |
| juniper junose e | <= 7.0.0 | No fix listed |
| juniper junose j | <= 6.3 | No fix listed |
| juniper junose m | <= 6.3.0 | No fix listed |
| juniper junose t | <= 6.3 | No fix listed |
References
- jvn.jp
- 17568 third-party-advisory
- 1015203 vdb-entry
- www.ee.oulu.fi
- VU#226364 third-party-advisory us-government-resource
- www.niscc.gov.uk
- 15402 vdb-entry
- ADV-2005-2410 vdb-entry