Vulnerabilities > CVE-2006-2298 - Denial Of Service vulnerability in Internet KEY Exchange Internet KEY Exchange 1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
internet-key-exchange
nessus

Summary

The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Sun has released patches to address the vulnerability.

Vulnerable Configurations

Part Description Count
Application
Internet_Key_Exchange
1

Nessus

  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_X86_118372.NASL
    descriptionSunOS 5.10_x86: elfsign patch. Date this patch was last updated by Sun : Apr/16/07
    last seen2018-09-01
    modified2018-08-13
    plugin id20333
    published2005-12-20
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=20333
    titleSolaris 10 (x86) : 118372-10
    code
    #%NASL_MIN_LEVEL 80502
    
    # @DEPRECATED@
    #
    # This script has been deprecated as the associated patch is not
    # currently a recommended security fix.
    #
    # Disabled on 2011/09/17.
    
    #
    # (C) Tenable Network Security, Inc.
    #
    #
    
    if ( ! defined_func("bn_random") ) exit(0);
    include("compat.inc");
    
    if(description)
    {
     script_id(20333);
     script_version("1.31");
    
     script_name(english: "Solaris 10 (x86) : 118372-10");
     script_cve_id("CVE-2005-3666", "CVE-2005-3667", "CVE-2005-3668", "CVE-2005-3674", "CVE-2006-2298", "CVE-2006-4339", "CVE-2006-5201", "CVE-2006-7140");
     script_set_attribute(attribute: "synopsis", value:
    "The remote host is missing Sun Security Patch number 118372-10");
     script_set_attribute(attribute: "description", value:
    'SunOS 5.10_x86: elfsign patch.
    Date this patch was last updated by Sun : Apr/16/07');
     script_set_attribute(attribute: "solution", value:
    "You should install this patch for your system to be up-to-date.");
     script_set_attribute(attribute: "see_also", value:
    "https://getupdates.oracle.com/readme/118372-10");
     script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
     script_cwe_id(310);
     script_set_attribute(attribute:"plugin_publication_date", value: "2005/12/20");
     script_cvs_date("Date: 2019/10/25 13:36:22");
     script_set_attribute(attribute:"vuln_publication_date", value: "2006/05/08");
     script_end_attributes();
    
     script_summary(english: "Check for patch 118372-10");
     script_category(ACT_GATHER_INFO);
     script_copyright(english:"This script is Copyright (C) 2005-2019 Tenable Network Security, Inc.");
     family["english"] = "Solaris Local Security Checks";
     script_family(english:family["english"]);
     
     script_dependencies("ssh_get_info.nasl");
     script_require_keys("Host/Solaris/showrev");
     exit(0);
    }
    
    
    
    # Deprecated.
    exit(0, "The associated patch is not currently a recommended security fix.");
    
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS9_X86_114435.NASL
    descriptionSunOS 5.9_x86: IKE patch. Date this patch was last updated by Sun : Aug/09/10
    last seen2016-09-26
    modified2012-06-14
    plugin id13602
    published2004-07-12
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=13602
    titleSolaris 9 (x86) : 114435-16
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS9_113451.NASL
    descriptionSunOS 5.9: IKE patch. Date this patch was last updated by Sun : Aug/09/10
    last seen2016-09-26
    modified2012-06-14
    plugin id13538
    published2004-07-12
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=13538
    titleSolaris 9 (sparc) : 113451-17
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_118371.NASL
    descriptionSunOS 5.10: elfsign patch. Date this patch was last updated by Sun : Apr/16/07
    last seen2018-09-02
    modified2018-08-13
    plugin id20332
    published2005-12-20
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=20332
    titleSolaris 10 (sparc) : 118371-10