VYPR
Unrated severityNVD Advisory· Published Nov 18, 2005· Updated Jun 16, 2026

CVE-2005-3674

CVE-2005-3674

Description

The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Sun Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked crash) via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*+ 2 more
    • cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*
    • cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*
    • (no CPE)range: 9 and 10

Patches

Vulnerability mechanics

Root cause

"The IKEv1 implementation in libike fails to properly handle malformed IKE packets, leading to a crash of the in.iked daemon."

Attack vector

An unauthenticated remote attacker can send specially crafted IKE packets to a vulnerable Solaris 9 or 10 system running in.iked. The attack is demonstrated by the PROTOS ISAKMP Test Suite for IKEv1, which generates malformed IKE packets that trigger a crash. No authentication or prior access is required, making the attack vector purely network-based.

Affected code

The vulnerability resides in the IKEv1 implementation within the libike library on Sun Solaris 9 and 10, specifically in the in.iked daemon. The advisory does not specify exact function names or file paths.

What the fix does

The advisory does not include a patch or detailed remediation for Solaris. It only notes that the issue was demonstrated by the PROTOS ISAKMP Test Suite and that the exact CVE overlap is unclear. No fix is published in this bundle.

Preconditions

  • configThe target must be running Sun Solaris 9 or 10 with the libike library and in.iked daemon active.
  • networkThe attacker must be able to send IP packets to the target's IKE port (UDP 500).

Generated on Jun 17, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

9

News mentions

0

No linked articles in our index yet.