CyberSec.Space Logo
Back to CVE Browser

CVE-2005-0398

MEDIUM
5.0
CVSS Severity Score
EPSS Score0.0980%
EPSS Percentile32.84th
PublishedMar 14, 2005
Last ModifiedApr 16, 2026

Vulnerability Description

The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.

Affected Platforms (CPE)

📦
Ipsec Tools

Ipsec Tools

= 0.3.3
📦
Ipsec Tools

Ipsec Tools

= 0.5
📦
Kame

Racoon

= 2003-07-11
📦
Kame

Racoon

= 2004-04-05
📦
Kame

Racoon

= 2004-04-07b
📦
Kame

Racoon

= 2004-05-03
📦
Kame

Racoon

= 2005-01-03
📦
Kame

Racoon

= 2005-01-10
📦
Kame

Racoon

= 2005-01-17
📦
Kame

Racoon

= 2005-01-24
📦
Kame

Racoon

= 2005-01-31
📦
Kame

Racoon

= 2005-02-07
📦
Kame

Racoon

= 2005-02-14
📦
Kame

Racoon

= 2005-02-21
📦
Kame

Racoon

= 2005-02-28
📦
Kame

Racoon

= 2005-03-07
📦
Sgi

Propack

= 3.0
💻
Altlinux

Alt Linux

= 2.3
💻
Altlinux

Alt Linux

= 2.3
💻
Redhat

Enterprise Linux

= 3.0
💻
Redhat

Enterprise Linux

= 3.0
💻
Redhat

Enterprise Linux

= 3.0
💻
Redhat

Enterprise Linux

= 4.0
💻
Redhat

Enterprise Linux

= 4.0
💻
Redhat

Enterprise Linux

= 4.0
💻
Redhat

Enterprise Linux Desktop

= 3.0
💻
Redhat

Enterprise Linux Desktop

= 4.0
💻
Suse

Suse Linux

All versions
💻
Suse

Suse Linux

All versions
💻
Suse

Suse Linux

= 9.1
💻
Suse

Suse Linux

= 9.1
💻
Suse

Suse Linux

= 9.2
💻
Suse

Suse Linux

= 9.2

References & Advisories

🔗 http://secunia.com/advisories/14584
🔗 http://security.gentoo.org/glsa/glsa-200503-33.xml
🔗 http://securitytracker.com/id?1013433
🔗 http://sourceforge.net/mailarchive/forum.php?thread_id=6787713&forum_id=32000
🔗 http://www.mandriva.com/security/advisories?name=MDKSA-2005:062
🔗 http://www.redhat.com/support/errata/RHSA-2005-232.html
🔗 http://www.securityfocus.com/bid/12804
🔗 http://www.vupen.com/english/advisories/2005/0264

Related Vulnerabilities

CVE-2008-36527.8

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remote...

CVE-2015-40477.8

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon...

CVE-2005-37327.8

The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in a...

CVE-2016-103967.5

The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing IS...