QwikSec

Security Database

CVE

CWE

Training

CVE-2006-3906

Published: Jul 27, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html

x_refsource_MISC

vdb-entry

x_refsource_BID

20060726 Cisco VPN Concentrator IKE resource exhaustion DoS Advisory

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_OSVDB

20060728 Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory

mailing-list

x_refsource_BUGTRAQ

oval:org.mitre.oval:def:5299

vdb-entry

signature

x_refsource_OVAL

vdb-entry

x_refsource_SECTRACK

third-party-advisory

x_refsource_SREASON

20060726 Internet Key Exchange Resource Exhaustion Attack

vendor-advisory

x_refsource_CISCO

cisco-ike-resource-exhaustion-dos(27972)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.