• info
• discussion
• exploit
• solution
• references

ISAKMPD "Invalid SPI" SA Deletion Vulnerability

Solution:
The vendor has released a patch to address this issue.


OpenBSD OpenBSD 3.0

• OpenBSD 009_isakmpd.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/009_isakmpd.patch

OpenBSD OpenBSD 3.2

• OpenBSD 009_isakmpd.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/009_isakmpd.patch

OpenBSD OpenBSD 3.4

• OpenBSD 009_isakmpd.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/009_isakmpd.patch

OpenBSD OpenBSD 3.1

• OpenBSD 009_isakmpd.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/009_isakmpd.patch

OpenBSD OpenBSD 3.3

• OpenBSD 009_isakmpd.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/009_isakmpd.patch


• OpenBSD 014_isakmpd.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.3/common/014_isakmpd.patch