CVE-2005-3768
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic...
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
CVE-2005-3768- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
CVE-2005-3768- Updated
- 2026-11-02
EUVDEUVD-2005-3763 No score
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
EUVD-2005-3763- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-382c-gf8c-2jc8 No score
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic...
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
GHSA-382c-gf8c-2jc8- Updated
- 2026-11-02
Affected products
- symantec enterprise firewall
- symantec firewall vpn appliance 100
- symantec firewall vpn appliance 200
- symantec gateway security 300
- symantec gateway security 400
- symantec gateway security 5000 series
- symantec gateway security 5100
- symantec gateway security 5300
- symantec gateway security 5310
- symantec gateway security 5400
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3768 is a high vulnerability (CVSS 7.5) in Symantec Enterprise Firewall, published November 23, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.78%, the 90th percentile. No source names a fixed version.
References
securitytracker.com/id?1015247
secunia.com/advisories/17684
vupen.com/english/advisories/2005/2517
securityresponse.symantec.com/avcenter/security/Content/2005.11.21.html
nvd.nist.gov/vuln/detail/CVE-2005-3768
github.com/advisories/GHSA-382c-gf8c-2jc8