Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-4565

Format string vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to have an unknown impact via format string specifiers in crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

Published

2005-12-29T11:03:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Hardware	adtran	netvanta	3xxx	Yes
Hardware	adtran	netvanta	4xxx	Yes
Hardware	adtran	netvanta	5xxx	Yes

References

http://secunia.com/advisories/18179 Patch, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/16028 ([email protected])
http://www.vupen.com/english/advisories/2005/3027 ([email protected])
http://www2.adtran.com/support/isakmp/ Patch ([email protected])
http://secunia.com/advisories/18179 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/16028 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2005/3027 (af854a3a-2127-422b-91ae-364da2661108)
http://www2.adtran.com/support/isakmp/ Patch (af854a3a-2127-422b-91ae-364da2661108)