Home Programs Emergency management Response CCIRC Analytical releases2 AV05-35: Multiple vulnerability issues in ISAKMP Protocol implementations

Multiple vulnerability issues in ISAKMP Protocol implementations

Advisory number: AV05-035
14 November 2005

Purpose

CERT-FI and NISCC have issued a joint advisory on multiple vulnerability issues in implementations of the Internet Security Association and Key Management Protocol (ISAKMP).

Assessment

Internet Key Exchange version 1 (IKEv1) is derived from ISAKMP and is a key component of Internet Security Architecture (IPSec) based virtual private networks (VPN).

Exploitation of this vulnerability may cause a denial-of-service (DoS) and in some cases could allow the execution of arbitrary code.

Juniper Networks, Inc rates this risk as High. Refer to bulletin number: PSN-2005-11-007.

Cisco Systems has release the following Cisco Security Advisory: Multiple Vulnerabilities Found by PROTOS IPSec Test Suite. http://www.cisco.com/en/US/products/products_security_advisory09186a0080572f55.shtml

The original advisory: http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en

Suggested action

Due to IPSec configuration complexities, PSEPC recommends that users of IPSec-based VPNs contact their vendors or service providers for mitigation or remedial advice.

Note to readers

Public Safety and Emergency Preparedness Canada (PSEPC) collects information related to cyber and physical threats to, and incidents involving, Canadian critical infrastructure. This allows us to monitor and analyze threats and to issue alerts, advisories and other information products. To report threats or incidents, please contact the Government Operations Centre (GOC) at (613) 991-7000 or goc-cog@psepc-sppcc.gc.ca by e-mail.

Unauthorized use of computer systems and mischief in relation to data are serious Criminal Code offences in Canada . Any suspected criminal activity should be reported to local law enforcement organizations. The Royal Canadian Mounted Police (RCMP) National Operations Centre (N.O.C.) provides a 24/7 service to receive such reports or to redirect callers to local law enforcement organizations. The N.O.C. can be reached at (613) 993-4460. National security concerns should be reported to the Canadian Security Intelligence Service (CSIS) at (613) 993-9620.