Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2005-3985

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Astaro Security Linux 6.102之前版本的Internet Key Exchange version 1 (IKEv1) implementation允许远程攻击者通过特制的IKE数据包，造成拒绝服务并可能执行任意代码，比如PROTOS ISAKMP Test Suite for IKEv1。

AI Predicted 9.8 Difficulty: Trivial EPSS 4.25% · P90
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2005-3985

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The Internet Key Exchange version 1 (IKEv1) implementation in Astaro Security Linux before 6.102 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Astaro Security Linux ISAKMP IKE Traffic 拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Astaro Security Linux 6.102之前版本的Internet Key Exchange version 1 (IKEv1) implementation允许远程攻击者通过特制的IKE数据包，造成拒绝服务并可能执行任意代码，比如PROTOS ISAKMP Test Suite for IKEv1。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2005-3985

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-3985

请登录查看更多情报信息。

Vendor Advisories for CVE-2005-3985 (3)

Same Patch Batch · n/a · 2005-12-04 · 55 CVEs total

CVE-2004-2639 Journalness帖子创建修改漏洞
CVE-2005-3991 PHPMyChat 多个跨站脚本攻击漏洞
CVE-2004-2649 Qualcomm Eudora Embedded Hyperlink URI模糊漏洞
CVE-2005-3988 Lore Article.PHP SQL注入漏洞
CVE-2005-3987 Tradesoft CMS多个SQL注入漏洞
CVE-2005-3986 Instant Photo Gallery多个SQL注入漏洞
CVE-2005-3989 Avaya TN2602AP IP Media Resource 320 远程拒绝服务漏洞
CVE-2004-2642 Nathaniel Bray Yeemp文件Transfer公钥认证绕过漏洞
CVE-2004-2641 Sun Fire/Netra单TOS选项IP包远程拒绝服务漏洞
CVE-2004-2640 LinuxStat远程目录遍历漏洞
CVE-2004-2643 微软CABARC目录遍历漏洞
CVE-2004-2638 Admin Access With Levels Plug-in For osCommerce访问控制绕过漏洞
CVE-2004-2637 Zonet无线路由器NAT实现设计缺陷漏洞
CVE-2004-2636 Rit Research Labs TinyWeb Server未授权脚本泄露漏洞
CVE-2004-2635 McAfee Security Installer Control System ActiveX信息披露漏洞
CVE-2004-2634 IBM AIX Console命令多个符号链接漏洞
CVE-2004-2633 Sesame未授权库访问漏洞
CVE-2004-2632 phpMyAdmin多个输入验证漏洞
CVE-2004-2631 phpMyAdmin多个输入验证漏洞
CVE-2004-2630 phpMyAdmin远程命令执行漏洞

Showing top 20 of 55 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2005-3985

No comments yet

Leave a comment