CVE-2005-3669 [Medium] | Denial of Service in Firewall Services Module

Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the Cisco advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2025-03-30	14.89%	9.46%	-5.42%
2	2025-03-29	9.46%	14.89%	+5.42%
3	2025-03-19	—	9.46%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2025-03-30

14.89%

9.46%

-5.42%

2025-03-29

9.46%

14.89%

+5.42%

2025-03-19

—

9.46%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
5.0	2.0	MEDIUM	`AV:N/AC:L/Au:N/C:N/I:N/A:P` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:L) Exploitation conditions are straightforward and predictable. Authentication (AU:N) No authentication is required. Confidentiality impact (C:N) No confidentiality impact. Integrity impact (I:N) No integrity impact. Availability impact (A:P) Partial availability impact.	10.0	2.9	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

5.0

2.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:L): Exploitation conditions are straightforward and predictable.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:N): No confidentiality impact.
Integrity impact (I:N): No integrity impact.
Availability impact (A:P): Partial availability impact.

10.0

2.9

[email protected]

OS Trackers for CVE-2005-3669

vendor	priority	summary	link
`alpine`	—	CVE-2005-3669: no source package rows; 0 state rows across 0 repos (none); fixed 0, open 0.	https://security.alpinelinux.org/vuln/CVE-2005-3669

Affected software / configurations for CVE-2005-3669

Vendor	Product	Version	Raw CPE
cisco	firewall_services_module	—	cpe:2.3:h:cisco:firewall_services_module::::::::
cisco	firewall_services_module	1.1.2	cpe:2.3:h:cisco:firewall_services_module:1.1.2:::::::*
cisco	firewall_services_module	1.1.3	cpe:2.3:h:cisco:firewall_services_module:1.1.3:::::::*
cisco	firewall_services_module	1.1_\(3.005\)	cpe:2.3:h:cisco:firewall_services_module:1.1_\(3.005\):::::::*
cisco	firewall_services_module	2.1_\(0.208\)	cpe:2.3:h:cisco:firewall_services_module:2.1_\(0.208\):::::::*
cisco	vpn_3000_concentrator_series_software	2.0	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:::::::*
cisco	vpn_3000_concentrator_series_software	2.5.2.a	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:::::::*
cisco	vpn_3000_concentrator_series_software	2.5.2.b	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:::::::*
cisco	vpn_3000_concentrator_series_software	2.5.2.c	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:::::::*
cisco	vpn_3000_concentrator_series_software	2.5.2.d	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:::::::*
cisco	vpn_3000_concentrator_series_software	2.5.2.f	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:::::::*
cisco	vpn_3000_concentrator_series_software	3.0	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:::::::*
cisco	vpn_3000_concentrator_series_software	3.0.3.a	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:::::::*
cisco	vpn_3000_concentrator_series_software	3.0.3.b	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:::::::*
cisco	vpn_3000_concentrator_series_software	3.0.4	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:::::::*
cisco	vpn_3000_concentrator_series_software	3.1	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:::::::*
cisco	vpn_3000_concentrator_series_software	3.1\(rel\)	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\(rel\):::::::*
cisco	vpn_3000_concentrator_series_software	3.1.1	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:::::::*
cisco	vpn_3000_concentrator_series_software	3.1.2	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:::::::*
cisco	vpn_3000_concentrator_series_software	3.1.4	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:::::::*
cisco	vpn_3000_concentrator_series_software	3.5\(rel\)	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\(rel\):::::::*
cisco	vpn_3000_concentrator_series_software	3.5.1	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:::::::*
cisco	vpn_3000_concentrator_series_software	3.5.2	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:::::::*
cisco	vpn_3000_concentrator_series_software	3.5.3	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:::::::*
cisco	vpn_3000_concentrator_series_software	3.5.4	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:::::::*
cisco	vpn_3000_concentrator_series_software	3.5.5	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.5:::::::*
cisco	vpn_3000_concentrator_series_software	3.6	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6:::::::*
cisco	vpn_3000_concentrator_series_software	3.6.1	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.1:::::::*
cisco	vpn_3000_concentrator_series_software	3.6.7	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7:::::::*
cisco	vpn_3000_concentrator_series_software	3.6.7d	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7d:::::::*
cisco	vpn_3000_concentrator_series_software	4.0	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:::::::*
cisco	vpn_3000_concentrator_series_software	4.0.1	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.1:::::::*
cisco	vpn_3000_concentrator_series_software	4.0.5.b	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:::::::*
cisco	vpn_3000_concentrator_series_software	4.1.5.b	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:::::::*
cisco	vpn_3000_concentrator_series_software	4.1.7.a	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:::::::*
cisco	vpn_3000_concentrator_series_software	4.1.7.b	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.b:::::::*
cisco	vpn_3000_concentrator_series_software	4.7.1	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1:::::::*
cisco	vpn_3000_concentrator_series_software	4.7.1.f	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1.f:::::::*
cisco	ios	12.2sxd	cpe:2.3:o:cisco:ios:12.2sxd:::::::*
cisco	ios	12.3t	cpe:2.3:o:cisco:ios:12.3t:::::::*
cisco	ios	12.3tpc	cpe:2.3:o:cisco:ios:12.3tpc:::::::*
cisco	ios	12.3xd	cpe:2.3:o:cisco:ios:12.3xd:::::::*
cisco	ios	12.3xe	cpe:2.3:o:cisco:ios:12.3xe:::::::*
cisco	ios	12.3xf	cpe:2.3:o:cisco:ios:12.3xf:::::::*
cisco	ios	12.3xg	cpe:2.3:o:cisco:ios:12.3xg:::::::*
cisco	ios	12.3xh	cpe:2.3:o:cisco:ios:12.3xh:::::::*
cisco	ios	12.3xi	cpe:2.3:o:cisco:ios:12.3xi:::::::*
cisco	ios	12.3xj	cpe:2.3:o:cisco:ios:12.3xj:::::::*
cisco	ios	12.3xk	cpe:2.3:o:cisco:ios:12.3xk:::::::*
cisco	ios	12.3xm	cpe:2.3:o:cisco:ios:12.3xm:::::::*
cisco	ios	12.3xq	cpe:2.3:o:cisco:ios:12.3xq:::::::*
cisco	ios	12.3xr	cpe:2.3:o:cisco:ios:12.3xr:::::::*
cisco	ios	12.3xs	cpe:2.3:o:cisco:ios:12.3xs:::::::*
cisco	ios	12.3xu	cpe:2.3:o:cisco:ios:12.3xu:::::::*
cisco	ios	12.3xw	cpe:2.3:o:cisco:ios:12.3xw:::::::*
cisco	ios	12.3xx	cpe:2.3:o:cisco:ios:12.3xx:::::::*
cisco	ios	12.3ya	cpe:2.3:o:cisco:ios:12.3ya:::::::*
cisco	ios	12.3yd	cpe:2.3:o:cisco:ios:12.3yd:::::::*
cisco	ios	12.3yf	cpe:2.3:o:cisco:ios:12.3yf:::::::*
cisco	ios	12.3yg	cpe:2.3:o:cisco:ios:12.3yg:::::::*
cisco	ios	12.3yh	cpe:2.3:o:cisco:ios:12.3yh:::::::*
cisco	ios	12.3yi	cpe:2.3:o:cisco:ios:12.3yi:::::::*
cisco	ios	12.3yj	cpe:2.3:o:cisco:ios:12.3yj:::::::*
cisco	ios	12.3yk	cpe:2.3:o:cisco:ios:12.3yk:::::::*
cisco	ios	12.3ym	cpe:2.3:o:cisco:ios:12.3ym:::::::*
cisco	ios	12.3yq	cpe:2.3:o:cisco:ios:12.3yq:::::::*
cisco	ios	12.3ys	cpe:2.3:o:cisco:ios:12.3ys:::::::*
cisco	ios	12.3yt	cpe:2.3:o:cisco:ios:12.3yt:::::::*
cisco	ios	12.3yu	cpe:2.3:o:cisco:ios:12.3yu:::::::*
cisco	ios	12.3yw	cpe:2.3:o:cisco:ios:12.3yw:::::::*
cisco	ios	12.3yx	cpe:2.3:o:cisco:ios:12.3yx:::::::*
cisco	ios	12.4	cpe:2.3:o:cisco:ios:12.4:::::::*
cisco	ios	12.4t	cpe:2.3:o:cisco:ios:12.4t:::::::*
cisco	ios	12.4xa	cpe:2.3:o:cisco:ios:12.4xa:::::::*
cisco	ios	12.4xb	cpe:2.3:o:cisco:ios:12.4xb:::::::*
cisco	adaptive_security_appliance_software	7.0	cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0:::::::*
cisco	pix_firewall	6.2.2_.111	cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:::::::*
cisco	pix_firewall	6.2.3_\(110\)	cpe:2.3:a:cisco:pix_firewall:6.2.3_\(110\):::::::*
cisco	pix_firewall	6.3.3_\(133\)	cpe:2.3:a:cisco:pix_firewall:6.3.3_\(133\):::::::*
cisco	mds_9000	—	cpe:2.3:h:cisco:mds_9000::::::::

References for CVE-2005-3669

URL	Tags
http://jvn.jp/niscc/NISCC-273756/index.html
http://secunia.com/advisories/17553
http://securitytracker.com/id?1015198
http://securitytracker.com/id?1015199
http://securitytracker.com/id?1015200
http://securitytracker.com/id?1015201
http://securitytracker.com/id?1015202
http://www.cisco.com/warp/public/707/cisco-sa-20051114-ipsec.shtml	Vendor Advisory
http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
http://www.kb.cert.org/vuls/id/226364	Third Party Advisory US Government Resource
http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en	Vendor Advisory
http://www.securityfocus.com/bid/15401
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5226

URL

CVE-2005-3669

Exploit prediction scoring system (EPSS) score for CVE-2005-3669

Common vulnerability scoring system (CVSS) metrics for CVE-2005-3669

Weakness enumeration for CVE-2005-3669

OS Trackers for CVE-2005-3669

Affected software / configurations for CVE-2005-3669

References for CVE-2005-3669