CVE-2005-1802

Nortel VPN Router (aka Contivity) allows remote attackers to cause a denial of service (crash) via an IPsec IKE packet with a malformed ISAKMP header.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-05-27

Last modified

2024-08-07

Affected products

• Contivity (Nortel)
• Vpn Router 1010 (Nortel)
• Vpn Router 1050 (Nortel)
• Vpn Router 1100 (Nortel)
• Vpn Router 1700 (Nortel)
• Vpn Router 1740 (Nortel)
• Vpn Router 2700 (Nortel)
• Vpn Router 5000 (Nortel)
• Vpn Router 600 (Nortel)

References

• http://securitytracker.com/id?1014068
• http://www.nta-monitor.com/news/vpn-flaws/nortel/vpn-router-dos/
• http://www.securityfocus.com/archive/1/399423
• http://www.securityfocus.com/bid/13792