CVE:CVE-2005-0398
CNNVD:CNNVD-200503-110
远程攻击者可以借助ipsec-tools 0.5之前版本的KAME racoon daemon，通过缺陷ISAKMP封包实施拒绝服务攻击(崩溃)。
solution:Upgrade ipsec-tools ipsec-tools to a higher version than 0.3.3,0.5,and avoid the version 0.3.3,0.5; Upgrade kame racoon to a higher version than 2003-07-11,2004-04-05,2004-04-07b,2004-05-03,2005-01-03,2005-01-10,2005-01-17,2005-01-24,2005-01-31,2005-02-07,2005-02-14,2005-02-21,2005-02-28,2005-03-07,and avoid the version 2003-07-11,2004-04-05,2004-04-07b,2004-05-03,2005-01-03,2005-01-10,2005-01-17,2005-01-24,2005-01-31,2005-02-07,2005-02-14,2005-02-21,2005-02-28,2005-03-07; Upgrade sgi propack to a higher version than 3.0,and avoid the version 3.0; Upgrade altlinux alt_linux to a higher version than 2.3,and avoid the version 2.3; Upgrade redhat enterprise_linux to a higher version than 3.0,4.0,and avoid the version 3.0,4.0; Upgrade redhat enterprise_linux_desktop to a higher version than 3.0,4.0,and avoid the version 3.0,4.0; Upgrade suse suse_linux to a higher version than *,9.1,9.2,and avoid the version 9.1,9.2