CVE-2005-0398

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14584Patch, Vendor Advisory
http://security.gentoo.org/glsa/glsa-200503-33.xmlPatch, Vendor Advisory
http://securitytracker.com/id?1013433Patch, Vendor Advisory
http://sourceforge.net/mailarchive/forum.php?thread_id=6787713&forum_id=32000Patch, Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:062
http://www.redhat.com/support/errata/RHSA-2005-232.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/12804Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2005/0264
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=109966&action=viewPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19707
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10028
http://secunia.com/advisories/14584Patch, Vendor Advisory
http://security.gentoo.org/glsa/glsa-200503-33.xmlPatch, Vendor Advisory
http://securitytracker.com/id?1013433Patch, Vendor Advisory
http://sourceforge.net/mailarchive/forum.php?thread_id=6787713&forum_id=32000Patch, Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:062
http://www.redhat.com/support/errata/RHSA-2005-232.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/12804Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2005/0264
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=109966&action=viewPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19707
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10028

Timeline

Published: Mar 14, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-03995.1Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other ap CVE-2005-04002.1The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new di CVE-2005-04015.1FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop e CVE-2005-04022.6Firefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into saving a page as a Firefox sidebar panel, the CVE-2005-04037.2init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-thread CVE-2005-04045.0KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypte CVE-2005-04065.5A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an in CVE-2005-04074.3Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitr CVE-2005-04089.8CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to CVE-2005-04096.4CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upl CVE-2005-04105.0SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV fi CVE-2005-04117.5Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary P