Signature Detail
Short Name |
IKE:DOS:ISAKMP-DOS |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
IKE |
Keywords |
ISAKMP Invalid Negotiation Traffic |
Release Date |
2005/12/12 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
IKE: ISAKMP Invalid Negotiation Traffic
This signature detects attempts to exploit a known vulnerability against ISAKMP IKE components. Attackers can send maliciously crafted packets to a router running a VPN node and cause a denial-of-service condition in the VPN.
Extended Description
Various Cisco IOS, PIX Firewall, Firewall Services Module (FWSM), VPN 3000 Series Concentrator, and MDS Series SanOS releases are prone to denial of service attacks. These issues are due to security flaws in Cisco's IPSec implementation. The vulnerabilities may be triggered by malformed IKE traffic. Successful attacks will cause most affected devices to restart. For Cisco MDS Series devices, this is limited to causing the IKE process to restart.
Affected Products
- Cisco Adaptive Security Appliance 7.0
- Cisco Firewall Services Module (FWSM) 1.1.0 (3.005)
- Cisco Firewall Services Module (FWSM) 1.1.2
- Cisco Firewall Services Module (FWSM) 1.1.3
- Cisco Firewall Services Module (FWSM) 2.1.0 (0.208)
- Cisco Firewall Services Module (FWSM)
- Cisco FWSM for Cisco Catalyst 6500/7600 Series 1.1 (3.005)
- Cisco FWSM for Cisco Catalyst 6500/7600 Series 2.1 (0.208)
- Cisco FWSM for Cisco Catalyst 6500/7600 Series
- Cisco Ios 12.4T
- Cisco IOS 12.2SXD
- Cisco IOS 12.3T
- Cisco IOS 12.3TPC
- Cisco IOS 12.3XD
- Cisco IOS 12.3XE
- Cisco IOS 12.3XF
- Cisco IOS 12.3XG
- Cisco IOS 12.3XH
- Cisco IOS 12.3XI
- Cisco IOS 12.3XJ
- Cisco IOS 12.3XK
- Cisco IOS 12.3XM
- Cisco IOS 12.3XQ
- Cisco IOS 12.3XR
- Cisco IOS 12.3XS
- Cisco IOS 12.3XU
- Cisco IOS 12.3XW
- Cisco IOS 12.3XX
- Cisco IOS 12.3YA
- Cisco IOS 12.3YD
- Cisco IOS 12.3YF
- Cisco IOS 12.3YG
- Cisco IOS 12.3YH
- Cisco IOS 12.3YI
- Cisco IOS 12.3YJ
- Cisco IOS 12.3YK
- Cisco IOS 12.3YM
- Cisco IOS 12.3YQ
- Cisco IOS 12.3YS
- Cisco IOS 12.3YT
- Cisco IOS 12.3YU
- Cisco IOS 12.3YW
- Cisco IOS 12.3YX
- Cisco IOS 12.4
- Cisco IOS 12.4T
- Cisco IOS 12.4XA
- Cisco IOS 12.4XB
- Cisco MDS 9000 1.3.0 (3.33)
- Cisco MDS 9000 1.3.0 (4a)
- Cisco MDS 9000 1.3(3.33)
- Cisco MDS 9000 1.3(4A)
- Cisco MDS 9000 2.0.0 (0.86)
- Cisco MDS 9000 2.0(0.86)
- Cisco MDS 9000
- Cisco PIX/ASA 7.0.0
- Cisco Pix Firewall 4.1(6)
- Cisco Pix Firewall 4.1(6B)
- Cisco Pix Firewall 4.2(1)
- Cisco Pix Firewall 4.2(2)
- Cisco Pix Firewall 4.2(5)
- Cisco Pix Firewall 4.4(4)
- Cisco Pix Firewall 4.4(7.202)
- Cisco Pix Firewall 4.4(8)
- Cisco Pix Firewall 5.1(4)
- Cisco Pix Firewall 5.1(4.206)
- Cisco Pix Firewall 5.2(1)
- Cisco Pix Firewall 5.2(2)
- Cisco Pix Firewall 5.2(3.210)
- Cisco Pix Firewall 5.2(5)
- Cisco Pix Firewall 5.2(6)
- Cisco Pix Firewall 5.2(7)
- Cisco Pix Firewall 5.2(9)
- Cisco Pix Firewall 5.3(1)
- Cisco Pix Firewall 5.3(1.200)
- Cisco Pix Firewall 5.3(2)
- Cisco Pix Firewall 5.3(3)
- Cisco Pix Firewall 6.0(1)
- Cisco Pix Firewall 6.0(2)
- Cisco Pix Firewall 6.0(3)
- Cisco Pix Firewall 6.0(4)
- Cisco Pix Firewall 6.0(4.101)
- Cisco Pix Firewall 6.1(1)
- Cisco Pix Firewall 6.1(2)
- Cisco Pix Firewall 6.1(3)
- Cisco Pix Firewall 6.1(4)
- Cisco Pix Firewall 6.1(5)
- Cisco Pix Firewall 6.1.5(104)
- Cisco Pix Firewall 6.2(1)
- Cisco Pix Firewall 6.2(2)
- Cisco Pix Firewall 6.2(3)
- Cisco Pix Firewall 6.2(3.100)
- Cisco Pix Firewall 6.3
- Cisco Pix Firewall 6.3(1)
- Cisco Pix Firewall 6.3(2)
- Cisco Pix Firewall 6.3(3.102)
- Cisco Pix Firewall 6.3(3.109)
- Cisco PIX Firewall 2.7.0
- Cisco PIX Firewall 3.0.0
- Cisco PIX Firewall 3.1.0
- Cisco PIX Firewall 4.0.0
- Cisco PIX Firewall 4.1.6
- Cisco PIX Firewall 4.1.6 b
- Cisco PIX Firewall 4.2.0
- Cisco PIX Firewall 4.2.0 (5)
- Cisco PIX Firewall 4.2.1
- Cisco PIX Firewall 4.2.2
- Cisco PIX Firewall 4.3.0
- Cisco PIX Firewall 4.4.0
- Cisco PIX Firewall 4.4.0 (4)
- Cisco PIX Firewall 4.4.0 (7.202)
- Cisco PIX Firewall 4.4.0 (8)
- Cisco PIX Firewall 5.0.0
- Cisco PIX Firewall 5.1.0
- Cisco PIX Firewall 5.1.0 (4.206)
- Cisco PIX Firewall 5.1.4
- Cisco PIX Firewall 5.2.0
- Cisco PIX Firewall 5.2.0 (1)
- Cisco PIX Firewall 5.2.0 (2)
- Cisco PIX Firewall 5.2.0 (3.210)
- Cisco PIX Firewall 5.2.0 (5)
- Cisco PIX Firewall 5.2.0 (6)
- Cisco PIX Firewall 5.2.0 (7)
- Cisco PIX Firewall 5.2.0 (9)
- Cisco PIX Firewall 5.3.0
- Cisco PIX Firewall 5.3.0 (1)
- Cisco PIX Firewall 5.3.0 (1.200)
- Cisco PIX Firewall 5.3.0 (2)
- Cisco PIX Firewall 5.3.0 (3)
- Cisco PIX Firewall 6.0.0
- Cisco PIX Firewall 6.0.0 (1)
- Cisco PIX Firewall 6.0.0 (2)
- Cisco PIX Firewall 6.0.0 (4)
- Cisco PIX Firewall 6.0.0 (4.101)
- Cisco PIX Firewall 6.0.3
- Cisco PIX Firewall 6.0.4
- Cisco PIX Firewall 6.1.0
- Cisco PIX Firewall 6.1.0 (1)
- Cisco PIX Firewall 6.1.0 (2)
- Cisco PIX Firewall 6.1.0 (3)
- Cisco PIX Firewall 6.1.0 (4)
- Cisco PIX Firewall 6.1.0 (5)
- Cisco PIX Firewall 6.1.3
- Cisco PIX Firewall 6.1.4
- Cisco PIX Firewall 6.1.5
- Cisco PIX Firewall 6.1.5 (104)
- Cisco PIX Firewall 6.2.0
- Cisco PIX Firewall 6.2.0 (1)
- Cisco PIX Firewall 6.2.0 (2)
- Cisco PIX Firewall 6.2.0 (3)
- Cisco PIX Firewall 6.2.0 (3.100)
- Cisco PIX Firewall 6.2.1
- Cisco PIX Firewall 6.2.2
- Cisco PIX Firewall 6.2.2 .111
- Cisco PIX Firewall 6.2.3
- Cisco PIX Firewall 6.2.3 (110)
- Cisco PIX Firewall 6.3.0
- Cisco PIX Firewall 6.3.0 (1)
- Cisco PIX Firewall 6.3.0 (3.102)
- Cisco PIX Firewall 6.3.0 (3.109)
- Cisco PIX Firewall 6.3.1
- Cisco PIX Firewall 6.3.2
- Cisco PIX Firewall 6.3.3 (133)
- Cisco VPN 3000 Concentrator 2.0.0
- Cisco VPN 3000 Concentrator 2.5.2 (A)
- Cisco VPN 3000 Concentrator 2.5.2 (B)
- Cisco VPN 3000 Concentrator 2.5.2 (C)
- Cisco VPN 3000 Concentrator 2.5.2 (D)
- Cisco VPN 3000 Concentrator 2.5.2 (F)
- Cisco VPN 3000 Concentrator 3.0.0
- Cisco VPN 3000 Concentrator 3.0.3 (A)
- Cisco VPN 3000 Concentrator 3.0.3 (B)
- Cisco VPN 3000 Concentrator 3.0.4
- Cisco VPN 3000 Concentrator 3.1.0
- Cisco VPN 3000 Concentrator 3.1.0 (Rel)
- Cisco VPN 3000 Concentrator 3.1.1
- Cisco VPN 3000 Concentrator 3.1.2
- Cisco VPN 3000 Concentrator 3.1.4
- Cisco VPN 3000 Concentrator 3.1(Rel)
- Cisco VPN 3000 Concentrator 3.5.0 (Rel)
- Cisco VPN 3000 Concentrator 3.5.1
- Cisco VPN 3000 Concentrator 3.5.2
- Cisco VPN 3000 Concentrator 3.5.3
- Cisco VPN 3000 Concentrator 3.5.4
- Cisco VPN 3000 Concentrator 3.5.5
- Cisco VPN 3000 Concentrator 3.5(Rel)
- Cisco VPN 3000 Concentrator 3.6.0
- Cisco VPN 3000 Concentrator 3.6.1
- Cisco VPN 3000 Concentrator 3.6.7
- Cisco VPN 3000 Concentrator 3.6.7 D
- Cisco VPN 3000 Concentrator 4.0.0
- Cisco VPN 3000 Concentrator 4.0.1
- Cisco VPN 3000 Concentrator 4.0.5 .B
- Cisco VPN 3000 Concentrator 4.1.5 .B
- Cisco VPN 3000 Concentrator 4.1.7.A
- Cisco VPN 3000 Concentrator 4.1.7.B
- Cisco VPN 3000 Concentrator 4.7.1
- Cisco VPN 3000 Concentrator 4.7.1 F
References