5

CVE-2002-0666

IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Frees Wan ≫ Frees Wan Version1.9
Frees Wan ≫ Frees Wan Version1.9.1
Frees Wan ≫ Frees Wan Version1.9.2
Frees Wan ≫ Frees Wan Version1.9.3
Frees Wan ≫ Frees Wan Version1.9.4
Frees Wan ≫ Frees Wan Version1.9.5
Frees Wan ≫ Frees Wan Version1.9.6
Apple ≫ macOS X Version10.2
Apple ≫ macOS X Server Version10.2
Freebsd ≫ Freebsd Version4.6
Freebsd ≫ Freebsd Version4.6 Updaterelease
Freebsd ≫ Freebsd Version4.6 Updatestable
Netbsd ≫ Netbsd Version1.5
Netbsd ≫ Netbsd Version1.5 Editionsh3
Netbsd ≫ Netbsd Version1.5 Editionx86
Netbsd ≫ Netbsd Version1.5.1
Netbsd ≫ Netbsd Version1.5.2
Netbsd ≫ Netbsd Version1.5.3
Netbsd ≫ Netbsd Version1.6 Updatebeta
Nec ≫ Ix1010
Nec ≫ Ix1011
Nec ≫ Ix1020
Nec ≫ Ix1050
Nec ≫ Ix2010
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.74% 0.72
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
http://www.kb.cert.org/vuls/id/459371
Third Party Advisory
US Government Resource