CVE-2005-3915: Clavister Firewall

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

The Internet Key Exchange version 1 (IKEv1) implementation in Clavister Client Web allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.

Affected products

• Clavister Clavister Firewall: version 8.30.01 only
• Clavister Clavister Security Gateway: version 8.40.05 only; version 8.50.02 only; version 8.60.01_rc1 only

Published 2005-11-30. Last modified 2026-06-16.