CVE-2005-4565 - Format string vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN

CVE-2005-4565

Summary

Format string vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to have an unknown impact via format string specifiers in crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

References

Vulnerable Configurations

cpe:2.3:h:adtran:netvanta:3xxx:*:*:*:*:*:*:*
cpe:2.3:h:adtran:netvanta:3xxx:*:*:*:*:*:*:*
cpe:2.3:h:adtran:netvanta:4xxx:*:*:*:*:*:*:*
cpe:2.3:h:adtran:netvanta:4xxx:*:*:*:*:*:*:*
cpe:2.3:h:adtran:netvanta:5xxx:*:*:*:*:*:*:*
cpe:2.3:h:adtran:netvanta:5xxx:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 08-03-2011 - 02:28)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	16028
confirm	http://www2.adtran.com/support/isakmp/
secunia	18179
vupen	ADV-2005-3027

Last major update

08-03-2011 - 02:28

Published

29-12-2005 - 11:03

Last modified

08-03-2011 - 02:28