CVE-2005-3668

CVE-2005-3668 is a medium-severity vulnerability in Internet Key Exchange with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Description

Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.

Frequently asked questions

What is CVE-2005-3668?
Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.
How severe is CVE-2005-3668?
CVE-2005-3668 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2005-3668 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (85th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2005-3668?
CVE-2005-3668 affects Internet Key Exchange. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2005-3668?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2005-3668 published?
CVE-2005-3668 was published on 2005-11-18 and last updated on 2026-06-16.

References

Affected products (1)

More vulnerabilities in Internet Key Exchange

All CVEs affecting Internet Key Exchange →