FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0219

This CVE name corresponds to:

Entered	Topic
2004-03-31	isakmpd payload handling denial-of-service vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0219 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0219
Phase	Assigned(20040313)

Description

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.

References

Source	Reference
BUGTRAQ	20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities
MISC	http://www.rapid7.com/advisories/R7-0018.html
OPENBSD	20040317 015: RELIABILITY FIX: March 17, 2004
CERT-VN	VU#785945
BID	9907
SECTRACK	1009468
XF	openbsd-isakmp-ipsec-dos(15628)