CVE-2006-0718

MITTEL 5.0CVE-2006-0718 · Published 15/02/2006 · updated 16/06/2026

Kurz gesagt

CVE-2006-0718 ist eine Schwachstelle (MITTEL (CVSS 5.0)) in vsu 100 (avaya), vsu 10000 (avaya), vsu 2000 (avaya).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.0%, höher als bei 80.8% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
vsu 100 avaya	`= 3.2.40`	No fix yet
vsu 10000 avaya	`= 3.2.40`	No fix yet
vsu 2000 avaya	`= 3.2.40`	No fix yet
vsu 7500 avaya	`= 3.2.40`	No fix yet

Description

The Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when running IPSec, allows remote attackers to cause a denial of service (crash) via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.

References

secunia.com/advisories/18836
support.avaya.com/elmodocs2/security/ASA-2006-043.htm · Patch
kb.cert.org/vuls/id/226364 · Third Party Advisory
securityfocus.com/bid/16613

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free