How severe is CVE-2005-3666?

CVE-2005-3666 has a CVSS 2.0 base score of 10.0, rated critical severity.

Is CVE-2005-3666 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (88th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2005-3666?

CVE-2005-3666 affects Internet Key Exchange. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2005-3666?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2005-3666 published?

CVE-2005-3666 was published on 2005-11-18 and last updated on 2026-06-16.

CVE-2005-3666

CVE-2005-3666 is a critical-severity vulnerability in Internet Key Exchange with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Critical (CVSS 2.0 base score 10.0)
EPSS exploit prediction: 3% (88th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Internet Key Exchange
Published: 2005-11-18
Last modified: 2026-06-16

Description

Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.

Frequently asked questions

What is CVE-2005-3666?: Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.
How severe is CVE-2005-3666?: CVE-2005-3666 has a CVSS 2.0 base score of 10.0, rated critical severity.
Is CVE-2005-3666 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (88th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2005-3666?: CVE-2005-3666 affects Internet Key Exchange. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2005-3666?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2005-3666 published?: CVE-2005-3666 was published on 2005-11-18 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:internet_key_exchange:internet_key_exchange:1:*:*:*:*:*:*:*

More vulnerabilities in Internet Key Exchange

CVE-2006-2298 — Medium (CVSS 5.0): The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote…
CVE-2006-1646 — Medium (CVSS 5.0): The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as…
CVE-2005-3668 — Medium (CVSS 5.0): Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have…
CVE-2005-3667 — Medium (CVSS 5.0): Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1)…

All CVEs affecting Internet Key Exchange →