SuSE Inc. Information for VU#287771
Multiple vendors' Internet Key Exchange (IKE) implementations do not properly handle IKE response packets
- Vendor Information Help Date Notified: 02 Jul 2002
- Statement Date:
- Date Updated: 12 Aug 2002
We reviewed critical parts of pluto (the daemon handling IKE) such as the code responsible for assembling and parsing IKE packets. We found no overflows or other bugs which could have security impacts.
The vendor has not provided us with any further information regarding this vulnerability.
The CERT/CC has no additional comments at this time.
If you have feedback, comments, or additional information about this vulnerability, please send us email.