CVE-2003-1320

SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.

Score

CVSS 2.0 5.1 Medium

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-09-16

Weaknesses

CWE-399

Affected products

• Firmware (Sonicwall)

References

• http://www.kb.cert.org/vuls/id/287771
• http://www.kb.cert.org/vuls/id/AAMN-5L74VD