← Database

CVE-2006-3906

MEDIUM CVSS: 5.0 Published: 2006-07-27 Modified: 2026-06-16

Description

Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.

Affected Platforms

Cisco Pix Firewall 515ECisco Adaptive Security Appliance SoftwareCisco Vpn 3020 ConcentratorCisco Vpn 3000 Concentrator Series SoftwareCisco Pix Firewall 535Cisco Vpn 3080 ConcentratorCisco Vpn 3015 ConcentratorCisco Pix Firewall 520Cisco Pix Firewall 515Cisco Pix Asa Ids

Weakness Type

NVD-CWE-Other

References