CVE-2005-3669

Name of the Vulnerable Software and Affected Versions Cisco IOS (affected versions not specified)

Description The issue is related to vulnerabilities in the processing of IPSec IKE messages in multiple Cisco products. These vulnerabilities were identified by the University of Oulu Secure Programming Group "PROTOS" Test Suite for IPSec and can be repeatedly exploited to produce a denial of service.

Recommendations For all affected versions, customers should consult their maintenance provider or check the software for feature set compatibility and known issues specific to their environment before deploying the free software made available by Cisco to address this issue. As a temporary workaround, consider restricting the processing of IPSec IKE messages until the software update is applied. At the moment, there is no information about specific versions that contain a fix for this issue, but Cisco has made free software available to address it.