CVE-2005-3732
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec...
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Exploit likelihood
What each source reports
NVD Score used
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
CVE-2005-3732- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
CVE-2005-3732- Updated
- 2026-11-02
EUVDEUVD-2005-3729 No score
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
EUVD-2005-3729- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wr7q-9p2g-rv39 No score
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec...
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
- Record
GHSA-wr7q-9p2g-rv39- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ipsec-toolsDebian:3.1 |
before 1:0.5.2-1sarge1, plus listed versions 1:0.5.2-1 |
1:0.5.2-1sarge1 |
ipsec-toolsRed Hat:enterprise_linux:3::as |
before 0:0.2.5-0.7.rhel3.3 | 0:0.2.5-0.7.rhel3.3 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:3::as |
before 0:0.2.5-0.7.rhel3.3 | 0:0.2.5-0.7.rhel3.3 |
ipsec-toolsRed Hat:enterprise_linux:3::desktop |
before 0:0.2.5-0.7.rhel3.3 | 0:0.2.5-0.7.rhel3.3 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:0.2.5-0.7.rhel3.3 | 0:0.2.5-0.7.rhel3.3 |
ipsec-toolsRed Hat:enterprise_linux:3::es |
before 0:0.2.5-0.7.rhel3.3 | 0:0.2.5-0.7.rhel3.3 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:3::es |
before 0:0.2.5-0.7.rhel3.3 | 0:0.2.5-0.7.rhel3.3 |
ipsec-toolsRed Hat:enterprise_linux:3::ws |
before 0:0.2.5-0.7.rhel3.3 | 0:0.2.5-0.7.rhel3.3 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:0.2.5-0.7.rhel3.3 | 0:0.2.5-0.7.rhel3.3 |
ipsec-toolsRed Hat:enterprise_linux:4::as |
before 0:0.3.3-6.rhel4.1 | 0:0.3.3-6.rhel4.1 |
Show 7 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ipsec-tools-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.3.3-6.rhel4.1 | 0:0.3.3-6.rhel4.1 |
ipsec-toolsRed Hat:enterprise_linux:4::desktop |
before 0:0.3.3-6.rhel4.1 | 0:0.3.3-6.rhel4.1 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.3.3-6.rhel4.1 | 0:0.3.3-6.rhel4.1 |
ipsec-toolsRed Hat:enterprise_linux:4::es |
before 0:0.3.3-6.rhel4.1 | 0:0.3.3-6.rhel4.1 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.3.3-6.rhel4.1 | 0:0.3.3-6.rhel4.1 |
ipsec-toolsRed Hat:enterprise_linux:4::ws |
before 0:0.3.3-6.rhel4.1 | 0:0.3.3-6.rhel4.1 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.3.3-6.rhel4.1 | 0:0.3.3-6.rhel4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3732 is a high vulnerability (CVSS 7.8) in Ipsec-tools, published November 21, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.44%, the 91st percentile. Fixed in ipsec-tools 1:0.5.2-1sarge1.
References
cvs.sourceforge.net/viewcvs.py/ipsec-tools/ipsec-tools/src/racoon/isakmp_agg.c?r1=1.20.2.3&r2=1.20.2.4&diff_format=u
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9857
secunia.com/advisories/18616
niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en
securityfocus.com/bid/15523
Show 28 moreShow less
sourceforge.net/mailarchive/forum.php?thread_id=9017454&forum_id=32000
securitytracker.com/id?1015254
debian.org/security/2006/dsa-965
archives.neohapsis.com/archives/bugtraq/2005-12/0161.html
gentoo.org/security/en/glsa/glsa-200512-04.xml
ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp
rhn.redhat.com/errata/RHSA-2006-0267.html
usn.ubuntu.com/221-1
mandriva.com/security/advisories?name=MDKSA-2006:020
vupen.com/english/advisories/2005/2521
novell.com/linux/security/advisories/2005_70_ipsec.html
nvd.nist.gov/vuln/detail/CVE-2005-3732
github.com/advisories/GHSA-wr7q-9p2g-rv39
access.redhat.com/errata/RHSA-2006:0267
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=173841
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0267.json
cve.org/CVERecord?id=CVE-2005-3732