Looks like a flaw in the ISAKMP portion of IPsec is vulnerable to a variety of vendor-specific flaws which could include DoS, format string attacks, and buffer overflows. Thought it was worth a mention.

source