CVE-2005-4570 (CNNVD-200512-619)
中文标题:
Multiple Fortinet Products IKE Exchange拒绝服务漏洞
英文标题:
The Internet Key Exchange version 1 (IKEv1) implementations in Fortinet FortiOS 2.50, 2.80 and 3.0, ...
漏洞描述
中文描述:
Fortinet FortiOS 2.50、2.80和3.0、FortiClient 2.0；和FortiManager 2.80及3.0中实施的Internet Key Exchange版本1(IKEv1) 使得远程攻击者可以通过带有某些IPSec属性无效值的IKE包发起拒绝服务攻击(自动重启的进程终止)，如PROTOS ISAKMP Test Suite for IKEv1。
英文描述:
The Internet Key Exchange version 1 (IKEv1) implementations in Fortinet FortiOS 2.50, 2.80 and 3.0, FortiClient 2.0,; and FortiManager 2.80 and 3.0 allow remote attackers to cause a denial of service (termination of a process that is automatically restarted) via IKE packets with invalid values of certain IPSec attributes, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the vendor advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
CWE类型:
标签:
受影响产品
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
AV:N/AC:L/Au:N/C:N/I:N/A:C
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2005-4570 |
2025-11-11 15:17:38 | 2025-11-11 07:32:30 |
| NVD | nvd_CVE-2005-4570 |
2025-11-11 14:51:21 | 2025-11-11 07:41:16 |
| CNNVD | cnnvd_CNNVD-200512-619 |
2025-11-11 15:08:49 | 2025-11-11 07:49:03 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-200512-619
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- severity: SeverityLevel.MEDIUM -> SeverityLevel.HIGH
- cvss_score: 未提取 -> 7.8
- cvss_vector: NOT_EXTRACTED -> AV:N/AC:L/Au:N/C:N/I:N/A:C
- cvss_version: NOT_EXTRACTED -> 2.0
- data_sources: ['cve'] -> ['cve', 'nvd']