Unscored CVE-2009-2868 EUVD-2009-2858GHSA-35r5-pw6j-5f37

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers…

Published Sep 28, 2009 · Updated Aug 7, 2024 · Assigned by cisco

Description

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers to cause a denial of service (Phase 1 SA exhaustion) via crafted requests, aka Bug IDs CSCsy07555 and CSCee72997.

References

ADV-2009-2759 vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=18887
20090923 Cisco IOS Software Internet Key Exchange Resource Exhaustion Vulnerability vendor-advisory