Red Hat RHSA-2006:0267 ipsec-tools racoon CVE-2005-3732 Security Advisory

RHSA Number: RHSA-2006:0267 Release Date: 2006-04-25 Update Date: 2006-04-25 Summary: ipsec-tools Security Update Type/Severity: Security Advisory; Medium Subject: Updated ipsec-tools packages that fix a vulnerability in racoon are now available. This update has been assessed by the Red Hat Security Response Team as having a medium security impact. Description: - The ipsec-tools package, used in conjunction with IPsec functionality in the Linux kernel, includes an IKEv1 key daemon named racoon. - A denial of service vulnerability was discovered in the ipsec-tools racoon daemon. If the victim's machine is configured in an insecure, non-recommended way for racoon, a remote attacker may cause the racoon daemon to crash. (CVE-2005-3732) - Users of ipsec-tools are advised to upgrade to these updated packages, which contain backported patches and are not affected by these vulnerabilities. Solution: Before applying this update, ensure that all previously released errata relevant to your system have been applied. Download and update the packages using Red Hat Network. The command used by the Red Hat Update Agent is: Affected Products: - Multiple versions and architectures of Red Hat Enterprise Linux - Multiple versions and architectures of Red Hat Enterprise Linux Workstation - Multiple versions and architectures of Red Hat Enterprise Linux Desktop - Multiple versions and architectures of Red Hat Enterprise Linux for IBM z Systems - Multiple versions and architectures of Red Hat Enterprise Linux for Power, big endian Fixes: - BZ-173841 - CVE-2005-3732 ipsec-tools IKE DoS - BZ-181605 - CVE-2005-3732 ipsec-tools IKE DoS CVEs: - CVE-2005-3732 References: - Link to mailing list archives discussing related issues - Link to related pages in Red Hat Security Updates classification

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat RHSA-2006:0267 ipsec-tools racoon CVE-2005-3732 Security Advisory