FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0222

This CVE name corresponds to:

Entered	Topic
2004-03-31	isakmpd payload handling denial-of-service vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0222 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0222
Phase	Assigned(20040313)

Description

Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via certain ISAKMP packets, as demonstrated by the Striker ISAKMP Protocol Test Suite.

References

Source	Reference
BUGTRAQ	20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities
MISC	http://www.rapid7.com/advisories/R7-0018.html
OPENBSD	20040317 015: RELIABILITY FIX: March 17, 2004
CERT-VN	VU#996177
BID	10028
SECTRACK	1009468
XF	openbsd-isakmp-memory-leak(15519)