CVE-2006-0718

MEDIO 5.0CVE-2006-0718 · Published 15/02/2006 · updated 16/06/2026

En resumen

CVE-2006-0718 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a vsu 100 (avaya), vsu 10000 (avaya), vsu 2000 (avaya).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.0%, mayor que el 80.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
vsu 100 avaya	`= 3.2.40`	No fix yet
vsu 10000 avaya	`= 3.2.40`	No fix yet
vsu 2000 avaya	`= 3.2.40`	No fix yet
vsu 7500 avaya	`= 3.2.40`	No fix yet

Description

The Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when running IPSec, allows remote attackers to cause a denial of service (crash) via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.

References

secunia.com/advisories/18836
support.avaya.com/elmodocs2/security/ASA-2006-043.htm · Patch
kb.cert.org/vuls/id/226364 · Third Party Advisory
securityfocus.com/bid/16613

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free