CVE-2005-3669: Cisco Adaptive Security Appliance Software

Medium severity, CVSS 5.0. EPSS: 5.2% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the Cisco advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.

Affected products

• Cisco Adaptive Security Appliance Software: version 7.0 only
• Cisco Firewall Services Module: any version; version 1.1.2 only; version 1.1.3 only; version 1.1_(3.005) only; version 2.1_(0.208) only
• Cisco IOS: version 12.2sxd only; version 12.3t only; version 12.3tpc only; version 12.3xd only; version 12.3xe only; version 12.3xf only; …
• Cisco Mds 9000: any version
• Cisco Mds 9000 San-OS: version 1.3(3.33) only; version 1.3(4a) only; version 2.0(0.86) only
• Cisco Pix Firewall: version 6.2.2_.111 only; version 6.2.3_(110) only; version 6.3.3_(133) only
• Cisco Pix Firewall Software: version 2.7 only; version 3.0 only; version 3.1 only; version 4.0 only; version 4.1(6) only; version 4.1(6b) only; …
• Cisco VPN 3000 Concentrator Series Software: version 2.0 only; version 2.5.2.a only; version 2.5.2.b only; version 2.5.2.c only; version 2.5.2.d only; version 2.5.2.f only; …

Published 2005-11-18. Last modified 2026-06-16.