TITLE:
Nortel Switched Firewall ISAKMP IKE Message Processing Denial of
Service

SECUNIA ADVISORY ID:
SA17608

VERIFY ADVISORY:
http://secunia.com/advisories/17608/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
>From remote

OPERATING SYSTEM:
Nortel Switched Firewall 5000 Series
http://secunia.com/product/6126/
Nortel Switched Firewall 5100 Series
http://secunia.com/product/6125/
Nortel Switched Firewall 6000 Series
http://secunia.com/product/6124/

DESCRIPTION:
A vulnerability has been reported in Nortel Switched Firewall, which
potentially can be exploited by malicious people to cause a DoS
(Denial of Service).

The vulnerability is caused due to unspecified errors in the
processing of IKEv1 Phase 1 protocol exchange messages. This may be
exploited to cause a DoS via specially crafted IKE packets.

The vulnerability is related to:
SA17553

SOLUTION:
Refer to the original advisory from Nortel Networks for instructions
how to apply fixes.

ORIGINAL ADVISORY:
Nortel Networks:
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=367651&RenditionID=

NISCC:
http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en

OTHER REFERENCES:
SA17553:
http://secunia.com/advisories/17553/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------