ISAKMP spi size buffer overflow
| isakmp-spi-size-bo (15669) |  High Risk |
Description:
Internet Security Association and Key Management Protocol (ISAKMP) is vulnerable to a buffer overflow. A remote attacker can send a specially-crafted ISAKMP payload to a vulnerable VPN client or server to overflow a buffer and execute arbitrary code on the system, possibly with administrative privileges.
The supported operating systems in the Platforms Affected list are only vulnerable if they use the LibKmp ISAKMP library. Only VPN or firewall products which implement the Entrust LibKmp ISAKMP library are vulnerable.
Consequences:
Gain Access
Remedy:
Apply the appropriate hotfix for this vulnerability, as listed in the Symantec Security Response SYM04-012 and available from the Symantec FTP Update Web site. See References.
References:
- CIAC Information Bulletin 0-206: Entrust LibKmp Library Vulnerabilities.
- Internet Security Systems Protection Advisory August 26, 2004: Entrust LibKmp Library Buffer Overflow.
- Network Working Group Web site: Request for Comments: 2408 Internet Security Association and Key Management Protocol (ISAKMP).
- Symantec FTP Update Web site: FTP updates.
- Symantec Security Response SYM04-012: Symantec IPsec/ISAKMP VPN Buffer Overflow.
- Symantec SG7004-20040715-00 - Entrust updates: Symantec VelociRaptor 1.5.
- BID-11039: Entrust LibKMP ISAKMP Library Remote IPsec/ISAKMP Buffer Overflow Vulnerability
- CVE-2004-0369: Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.
Platforms Affected:
- Cisco VPN 5000 Client
- Symantec Enterprise Firewall
- Symantec Gateway Security 5300 1.0
- Symantec Gateway Security 5400 2.0
- Symantec VelociRaptor 1.5
Reported:
Mar 30, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net