CVE-2005-3671
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4...
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Exploit likelihood
What each source reports
NVD Score used
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
CVE-2005-3671- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
CVE-2005-3671- Updated
- 2026-11-02
EUVDEUVD-2005-3668 No score
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
EUVD-2005-3668- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rv79-rv3w-mqqc No score
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4...
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
GHSA-rv79-rv3w-mqqc- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3671 is a high vulnerability (CVSS 7.8) in Frees Wan Wan, published November 18, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.45%, the 94th percentile. No source names a fixed version.
References
niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en
securityfocus.com/bid/15416
redhat.com/archives/fedora-announce-list/2005-November/msg00058.html
securitytracker.com/id?1015214
secunia.com/advisories/17581
archives.neohapsis.com/archives/bugtraq/2005-12/0161.html
Show 13 moreShow less
jvn.jp/niscc/NISCC-273756/index.html
gentoo.org/security/en/glsa/glsa-200512-04.xml
ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp
kb.cert.org/vuls/id/226364
openswan.org/niscc2
novell.com/linux/security/advisories/2005_70_ipsec.html
nvd.nist.gov/vuln/detail/CVE-2005-3671
github.com/advisories/GHSA-rv79-rv3w-mqqc