Secunia

Two vulnerabilities have been reported in Cisco IOS, which can be exploited by malicious people to bypass certain security restrictions.

1) An error in the processing of IKE (Internet Key Exchange) XAUTH messages can be be exploited via specially crafted packets to complete authentication and gain access to network resources.

Successful exploitation requires knowledge of the shared group key to complete the IKE Phase 1 negotiation.

2) An error within the handling of ISAKMP profile attributes may cause the attributes to not be processed and result in a deadlock condition, which can be exploited to establish an unauthorised IPsec SA (Security Association).

This vulnerability only affects ISAKMP profiles matched by certificate maps.

The vulnerabilities affect network devices running the Cisco IOS 12.2T, 12.3, and 12.3T release trains and are configured for Cisco Easy VPN Server XAUTH version 6 authentication.

Solution
See patch matrix in the vendor advisory for information about fixes.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area