CVE-2006-3906
No fix known EPSS 7%
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.
Products: cisco ios, cisco adaptive_security_appliance_software, cisco vpn_3000_concentrator_series_software, cisco vpn_3005_concentrator_software, cisco vpn_3030_concentator, cisco pix_asa_ids, cisco pix_firewall, cisco pix_firewall_software