CVE-2005-4321

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

The Internet Key Exchange version 1 (IKEv1) implementation in Apani Networks EpiForce 1.9 and earlier running IPSec, allow remote attackers to cause a denial of service (crash) via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.

Metrics

CVSS 2.0 7.8/10AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/17985/Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/226364Third Party Advisory, US Government Resource
http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=enPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/419104/100/0/threaded
http://www.securityfocus.com/bid/15797/
http://www.securitytracker.com/alerts/2005/Dec/1015340.htmlPatch, Vendor Advisory
http://www.vupen.com/english/advisories/2005/2855
http://secunia.com/advisories/17985/Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/226364Third Party Advisory, US Government Resource
http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=enPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/419104/100/0/threaded
http://www.securityfocus.com/bid/15797/
http://www.securitytracker.com/alerts/2005/Dec/1015340.htmlPatch, Vendor Advisory
http://www.vupen.com/english/advisories/2005/2855

Timeline

Published: Dec 17, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-43224.3Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboratio CVE-2005-43237.8Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-CVE-2005-43247.8Hitachi Groupmax Mail SMTP 06-50 through 06-52-/A and 07-00 through 07-20 allows remote attackers to cause a denial of service (service stop CVE-2005-432510.0Multiple unspecified vulnerabilities in Driverse before 0.56b have unknown impact and attack vectors, related to (1) a "ptrace exploit" and CVE-2005-43265.0The web interface for American Power Conversion (APC) PowerChute Network Shutdown performs all communication in cleartext (base64-encoded), CVE-2005-43274.3Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject arbitrary web script CVE-2005-43284.3Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web CVE-2005-43297.5SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attackers to execute arbitr CVE-2005-43307.5SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the (1) id,CVE-2005-43317.5SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitrary SQL commands via CVE-2005-43329.4Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of serv CVE-2005-43334.3Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attackers to inject arbitrar