← Database

CVE-2007-6094

MEDIUM CVSS: 4.3 Published: 2007-11-22 Modified: 2026-06-16

Description

The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service (module crash) via an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy (PFS).

Affected Platforms

Ingate Ingate FirewallIngate Ingate Siparator

Weakness Type

CWE-20

References