Initial Publication Date: Advisory Status: Advisory Severity: Legacy ID
21 Nov 2005 Closed Medium
The NISCC (National Infrastructure Security Co-ordination Centre) a UK-sponsored inter-departmental agency has identified nearly five-thousand potential ISAKMP vulnerabilities. Test for these vulnerabilities were created by the NISCC and distributed to an unspecified number of vendors including Symantec.
While proactively testing our products against these vulnerabilities, Symantec uncovered a buffer overflow in two out of the five-thousand tests that can lead to a denial of service of the dynamic VPN services.
Dynamic IPsec VPN tunnels require the use of ISAKMP (Internet Security Association and Key Management Protocol), a standard protocol that provides the framework for establishing, negotiating, modifying, and deleting security associations. The ISAKMP service listens on UDP port 500 on all the affected security gateways. Under certain conditions a malformed ISAKMP packet can potentially cause the ISAKMP service to crash therefore affecting the ability and stability of dynamic VPN tunnels.
Symantec engineers created patches to correct this issue. The patches listed above are available via the Symantec Enterprise Support site:
Symantec is not aware of any active attempts against or customers impacted by this issue. M
As a part of normal best practices, users should keep vendor-supplied patches for all application software and operating systems up-to-date. Symantec strongly recommends any affected customers update their product immediately to protect against these types of threats.
This is machine translated content
Login to Subscribe
Please login to set up your
Would you like to be subscribed to future notifications for this article?
For security reasons, your link to this document has expired. Please click on the attachment link to access this file.
The attachment that you are looking for no longer exists.
There has been an issue retrieving your attachment. Please try again.
Currently server is down.
Didn't find the article you were looking for? Try these resources.