CVE-2006-3906

Cisco IOS and VPN 3000 Concentrator Series - Denial of Service via IKE Phase-1 Packet Flood

Title source: llm

Description

Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.

References (10)

Core 10

Core References

Various Sources x_refsource_misc

http://www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/19176

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/441203/100/0/threaded

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/29068

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2006-07/0531.html

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5299

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1016582

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/1293

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/tech/tk583/tk372/tsd_technology_security_response09186a00806f33d4.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/27972

Scores

EPSS 0.0675

EPSS Percentile 93.3%

Details

Status published

Products (50)

cisco/adaptive_security_appliance_software 7.0

cisco/adaptive_security_appliance_software 7.0\(4\)

cisco/adaptive_security_appliance_software 7.0\(5\)

cisco/adaptive_security_appliance_software 7.0.1.4

cisco/adaptive_security_appliance_software 7.0.4.3

cisco/adaptive_security_appliance_software 7.1\(2\)

cisco/ios

cisco/pix_asa_ids

cisco/pix_firewall 6.2.2_.111

cisco/pix_firewall 6.2.3_\(110\)

... and 40 more

Published Jul 27, 2006

Tracked Since Feb 18, 2026