CVE-2006-4436 Security feature bypass in n/a
Remote attackers can replay IPSec packets and bypass replay protection due to a zero-size replay window in OpenBSD's isakmpd responder.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-4436?
CVE-2006-4436 is a medium-severity vulnerability in Openbsd Openbsd, published on 29 Aug 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
isakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations (SA) with a replay window of size 0 when isakmpd acts as a responder during SA negotiation, which allows remote attackers to replay IPSec packets and bypass the replay protection.
Which versions are affected by CVE-2006-4436?
It affects 1 product.
Products include Openbsd Openbsd.
How do I fix CVE-2006-4436?
Apply the vendor's patch.
Is CVE-2006-4436 being exploited?
There is no known exploitation of CVE-2006-4436 in the wild and no public exploit code.
Other vulnerabilities in Openbsd Openbsd
Sources
Also known as DSA-1175-1, GHSA-8rrj-gp2f-j85m.