CVE:CVE-2005-3669
CNNVD:CNNVD-200511-271
IP Security或IPSec（全称InternetProtocolSecurity）是国际互联网工程任务组（IETF）的IPSec小组建立的一组IP安全协议集，它定义了在网络层使用的安全服务，其功能包括数据加密、对网络单元的访问控制、数据源地址验证、数据完整性检查和防止重放攻击。
多个Cisco产品在处理IPSec IKE消息时存在漏洞。IPSec的PROTOS测试组件可通过向目标设备发送畸形的IKE消息测试IPSec实现的设计局限。如果收到了特定的畸形报文的话，有漏洞的Cisco设备可能重置，导致临时的拒绝服务。
solution:Upgrade cisco firewall_services_module to a higher version than *,1.1.2,1.1.3,1.1_(3.005,2.1_(0.208,and avoid the version 1.1.2,1.1.3,1.1_(3.005),2.1_(0.208); Upgrade cisco vpn_3000_concentrator_series_software to a higher version than 2.0,2.5.2.a,2.5.2.b,2.5.2.c,2.5.2.d,2.5.2.f,3.0,3.0.3.a,3.0.3.b,3.0.4,3.1,3.1(rel,3.1.1,3.1.2,3.1.4,3.5(rel,3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.6,3.6.1,3.6.7,3.6.7d,4.0,4.0.1,4.0.5.b,4.1.5.b,4.1.7.a,4.1.7.b,4.7.1,4.7.1.f,and avoid the version 2.0,2.5.2.a,2.5.2.b,2.5.2.c,2.5.2.d,2.5.2.f,3.0,3.0.3.a,3.0.3.b,3.0.4,3.1,3.1(rel),3.1.1,3.1.2,3.1.4,3.5(rel),3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.6,3.6.1,3.6.7,3.6.7d,4.0,4.0.1,4.0.5.b,4.1.5.b,4.1.7.a,4.1.7.b,4.7.1,4.7.1.f; Upgrade cisco ios to a higher version than 12.2sxd,12.3t,12.3tpc,12.3xd,12.3xe,12.3xf,12.3xg,12.3xh,12.3xi,12.3xj,12.3xk,12.3xm,12.3xq,12.3xr,12.3xs,12.3xu,12.3xw,12.3xx,12.3ya,12.3yd,12.3yf,12.3yg,12.3yh,12.3yi,12.3yj,12.3yk,12.3ym,12.3yq,12.3ys,12.3yt,12.3yu,12.3yw,12.3yx,12.4,12.4t,12.4xa,12.4xb,and avoid the version 12.2sxd,12.3t,12.3tpc,12.3xd,12.3xe,12.3xf,12.3xg,12.3xh,12.3xi,12.3xj,12.3xk,12.3xm,12.3xq,12.3xr,12.3xs,12.3xu,12.3xw,12.3xx,12.3ya,12.3yd,12.3yf,12.3yg,12.3yh,12.3yi,12.3yj,12.3yk,12.3ym,12.3yq,12.3ys,12.3yt,12.3yu,12.3yw,12.3yx,12.4,12.4t,12.4xa,12.4xb; Upgrade cisco adaptive_security_appliance_software to a higher version than 7.0,and avoid the version 7.0; Upgrade cisco pix_firewall to a higher version than 6.2.2_.111,6.2.3_(110,6.3.3_(133,6.1.5(104,and avoid the version 6.2.2_.111,6.2.3_(110),6.3.3_(133),6.1.5(104); Upgrade cisco mds_9000 to a higher version than *; Upgrade cisco mds_9000_san-os to a higher version than 1.3(3.33,1.3(4a,2.0(0.86,and avoid the version 1.3(3.33),1.3(4a),2.0(0.86); Upgrade cisco pix_firewall_software to a higher version than 2.7,3.0,3.1,4.0,4.1(6,4.1(6b,4.2,4.2(1,4.2(2,4.2(5,4.3,4.4,4.4(4,4.4(7.202,4.4(8,5.0,5.1,5.1(4,5.1(4.206,5.2,5.2(1,5.2(2,5.2(3.210,5.2(5,5.2(6,5.2(7,5.2(9,5.3,5.3(1,5.3(1.200,5.3(2,5.3(3,6.0,6.0(1,6.0(2,6.0(3,6.0(4,6.0(4.101,6.1,6.1(1,6.1(2,6.1(3,6.1(4,6.1(5,6.2,6.2(1,6.2(2,6.2(3,6.2(3.100,6.3,6.3(1,6.3(2,6.3(3.102,6.3(3.109,and avoid the version 2.7,3.0,3.1,4.0,4.1(6),4.1(6b),4.2,4.2(1),4.2(2),4.2(5),4.3,4.4,4.4(4),4.4(7.202),4.4(8),5.0,5.1,5.1(4),5.1(4.206),5.2,5.2(1),5.2(2),5.2(3.210),5.2(5),5.2(6),5.2(7),5.2(9),5.3,5.3(1),5.3(1.200),5.3(2),5.3(3),6.0,6.0(1),6.0(2),6.0(3),6.0(4),6.0(4.101),6.1,6.1(1),6.1(2),6.1(3),6.1(4),6.1(5),6.2,6.2(1),6.2(2),6.2(3),6.2(3.100),6.3,6.3(1),6.3(2),6.3(3.102),6.3(3.109)