KAME 拒绝服务漏洞

漏洞信息详情

KAME 拒绝服务漏洞

• CNNVD编号：CNNVD-200503-110
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2005-0398
  
• 漏洞类型：
  
  
  边界条件错误
  
• 发布时间：
  
  2005-03-14
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2009-06-13
  
• 厂        商：
  
  suse
• 漏洞来源：
  Discovery is credi…

远程攻击者可以借助ipsec-tools 0.5之前版本的KAME racoon daemon，通过缺陷ISAKMP封包实施拒绝服务攻击(崩溃)。

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

KAME Racoon 20050214

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon 20050110

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon 20040405

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon 20050103

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon 20050207

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon 20040503

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon 20050307

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon 20050117

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon 20050124

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon 20050228

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon 20050221

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon 20030711

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon 20050131

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon 20040407b

KAME racoon 20050314

http://www.kame.net/snap-users/

KAME Racoon

KAME racoon 20050314

http://www.kame.net/snap-users/

IPsec-Tools IPsec-Tools 0.3.3

Ubuntu ipsec-tools_0.3.3-1ubuntu0.1_amd64.deb

Ubuntu 4.10 (Warty Warthog)

http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_ 0.3.3-1ubuntu0.1_amd64.deb

Ubuntu ipsec-tools_0.3.3-1ubuntu0.1_i386.deb

Ubuntu 4.10 (Warty Warthog)

http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_ 0.3.3-1ubuntu0.1_i386.deb

Ubuntu ipsec-tools_0.3.3-1ubuntu0.1_powerpc.deb

Ubuntu 4.10 (Warty Warthog)

http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_ 0.3.3-1ubuntu0.1_powerpc.deb

Ubuntu racoon_0.3.3-1ubuntu0.1_amd64.deb

Ubuntu 4.10 (Warty Warthog)

http://security.ubuntu.com/ubuntu/pool/universe/i/ipsec-tools/racoon_0 .3.3-1ubuntu0.1_amd64.deb

Ubuntu racoon_0.3.3-1ubuntu0.1_i386.deb

Ubuntu 4.10 (Warty Warthog)

http://security.ubuntu.com/ubuntu/pool/universe/i/ipsec-tools/racoon_0 .3.3-1ubuntu0.1_i386.deb

Ubuntu racoon_0.3.3-1ubuntu0.1_powerpc.deb

Ubuntu 4.10 (Warty Warthog)

http://security.ubuntu.com/ubuntu/pool/universe/i/ipsec-tools/racoon_0 .3.3-1ubuntu0.1_powerpc.deb

IPsec-Tools IPsec-Tools 0.5

Fedora ipsec-tools-0.5-2.fc2.i386.rpm

RedHat Fedora Core 2

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora ipsec-tools-0.5-2.fc2.x86_64.rpm

RedHat Fedora Core 2

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora ipsec-tools-0.5-2.fc3.i386.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

Fedora ipsec-tools-0.5-2.fc3.x86_64.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

Fedora ipsec-tools-debuginfo-0.5-2.fc2.i386.rpm

RedHat Fedora Core 2

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora ipsec-tools-debuginfo-0.5-2.fc2.x86_64.rpm

RedHat Fedora Core 2

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora ipsec-tools-debuginfo-0.5-2.fc3.i386.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

Fedora ipsec-tools-debuginfo-0.5-2.fc3.x86_64.rpm

RedHat Fedora Core 3

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

SCO Open Server 6.0

SCO SCOSA-2005.52

OpenServer 6.0.0

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.52

SCO SCOSA-2005.52

OpenServer 6.0.0

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.52

SCO Unixware 7.1.4

SCO erg712818.uw714.pkg.Z

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.37

S.u.S.E. Linux Personal 9.1 x86_64

SuSE ipsec-tools-0.3.3-1.6.x86_64.rpm

ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/ipsec-tools-0 .3.3-1.6.x86_64.rpm

S.u.S.E. Linux Personal 9.1

SuSE ipsec-tools-0.3.3-1.6.i586.rpm

ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/ipsec-tools-0.3.3 -1.6.i586.rpm

S.u.S.E. Linux Personal 9.2

SuSE i

来源: MISC

链接:https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=109966&action=view

来源: XF

名称: racoon-isakmp-header-dos(19707)

链接:http://xforce.iss.net/xforce/xfdb/19707

来源: BID

名称: 12804

链接:http://www.securityfocus.com/bid/12804

来源: REDHAT

名称: RHSA-2005:232

链接:http://www.redhat.com/support/errata/RHSA-2005-232.html

来源: VUPEN

名称: ADV-2005-0264

链接:http://www.frsirt.com/english/advisories/2005/0264

来源: MLIST

名称: [ipsec-tools-devel] 20050312 potential remote crash in racoon

链接:http://sourceforge.net/mailarchive/forum.php?thread_id=6787713&forum_id=32000

来源: SECTRACK

名称: 1013433

链接:http://securitytracker.com/id?1013433

来源: GENTOO

名称: GLSA-200503-33

链接:http://security.gentoo.org/glsa/glsa-200503-33.xml

来源: SECUNIA

名称: 14584

链接:http://secunia.com/advisories/14584

来源: MANDRAKE

名称: MDKSA-2005:062

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2005:062