medium5.0
CVE-2002-0666
IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause …
Impact
IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Frees Wan | Frees Wan | Versions 1.9, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5 |
| Apple | Mac Os X | Version 10.2 |
| Apple | Mac Os X Server | Version 10.2 |
| Freebsd | Freebsd | Version 4.6 |
| Netbsd | Netbsd | Versions 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6 |
| Global Technology Associates | Gnat Box Firmware | Versions 3.1, 3.2, 3.3 |
| Nec | Bluefire Ix1035 Router | All versions |
| Nec | Ix1010 | All versions |
| Nec | Ix1011 | All versions |
| Nec | Ix1020 | All versions |
| Nec | Ix1050 | All versions |
| Nec | Ix2010 | All versions |
References
- NVD record
- CVE.org record
- http://razor.bindview.com/publish/advisories/adv_ipsec.html
- http://www.debian.org/security/2002/dsa-201
- http://www.iss.net/security_center/static/10411.php
- http://www.kb.cert.org/vuls/id/459371
- http://www.securityfocus.com/bid/6011
- http://razor.bindview.com/publish/advisories/adv_ipsec.html
- http://www.debian.org/security/2002/dsa-201
- http://www.iss.net/security_center/static/10411.php
- http://www.kb.cert.org/vuls/id/459371
- http://www.securityfocus.com/bid/6011