> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of
> Dries Schellekens
> Sent: Tuesday, November 15, 2005 9:26 AM
> To: Chad Loder
> Cc: [email protected]
> Subject: Re: isakmp implementation vulnerabilities
> 
> Chad Loder wrote:
> 
> > I just tested our isakmpd(8) implementation against the PROTOS
> > test suite.  No problems were detected.  We performed an audit
> > of isakmpd's IKE parsing code back in early 2004 and made several
> > fixes (OpenBSD 3.4 timeframe).
> 
> I guess you are referring to errata 015 of OpenBSD 3.4 (March 17,
2004).
> 
> Now that is proactive security ;-)
> 
> 
> Cheers,
> 
> Dries

I guess it would be interesting to test isakmpd from before that patch
and see if it was vulnerable.

Reply via email to