CVE-2005-3671
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4...
CVE-2005-3671 is a high vulnerability (CVSS 7.8) in Frees Wan Wan, published November 18, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.45%, the 94th percentile. No source names a fixed version.
- Severity
- 7.8 HighCVSS 2.0, NVD
- Exploit chance
- 7.45%EPSS, 94th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Exploit likelihood
Affected products
What each source reports
NVD Score used
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
CVE-2005-3671- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE ListNo score
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
CVE-2005-3671- Updated
- 2026-11-02
EUVDEUVD-2005-3668No score
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
EUVD-2005-3668- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rv79-rv3w-mqqcNo score
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4...
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
GHSA-rv79-rv3w-mqqc- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en
securityfocus.com/bid/15416
redhat.com/archives/fedora-announce-list/2005-November/msg00058.html
securitytracker.com/id?1015214
secunia.com/advisories/17581
archives.neohapsis.com/archives/bugtraq/2005-12/0161.html
Show 13 moreShow less
jvn.jp/niscc/NISCC-273756/index.html
gentoo.org/security/en/glsa/glsa-200512-04.xml
ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp
kb.cert.org/vuls/id/226364
openswan.org/niscc2
novell.com/linux/security/advisories/2005_70_ipsec.html
nvd.nist.gov/vuln/detail/CVE-2005-3671
github.com/advisories/GHSA-rv79-rv3w-mqqc