7.5

CVE-2006-0905

A "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and conduct replay attacks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version 4.8
Freebsd ≫ Freebsd Version 4.8 Update pre-release
Freebsd ≫ Freebsd Version 4.8 Update release_p7
Freebsd ≫ Freebsd Version 4.8 Update releng
Freebsd ≫ Freebsd Version 4.9
Freebsd ≫ Freebsd Version 4.9 Update pre-release
Freebsd ≫ Freebsd Version 4.9 Update releng
Freebsd ≫ Freebsd Version 4.10
Freebsd ≫ Freebsd Version 4.10 Update release
Freebsd ≫ Freebsd Version 4.10 Update release_p8
Freebsd ≫ Freebsd Version 4.10 Update releng
Freebsd ≫ Freebsd Version 4.11 Update release_p3
Freebsd ≫ Freebsd Version 4.11 Update releng
Freebsd ≫ Freebsd Version 4.11 Update stable
Freebsd ≫ Freebsd Version 5.0
Freebsd ≫ Freebsd Version 5.0 Update alpha
Freebsd ≫ Freebsd Version 5.0 Update release_p14
Freebsd ≫ Freebsd Version 5.0 Update releng
Freebsd ≫ Freebsd Version 5.1
Freebsd ≫ Freebsd Version 5.1 Update alpha
Freebsd ≫ Freebsd Version 5.1 Update release
Freebsd ≫ Freebsd Version 5.1 Update release_p5
Freebsd ≫ Freebsd Version 5.1 Update releng
Freebsd ≫ Freebsd Version 5.2
Freebsd ≫ Freebsd Version 5.2.1 Update release
Freebsd ≫ Freebsd Version 5.2.1 Update releng
Freebsd ≫ Freebsd Version 5.3
Freebsd ≫ Freebsd Version 5.3 Update release
Freebsd ≫ Freebsd Version 5.3 Update releng
Freebsd ≫ Freebsd Version 5.3 Update stable
Freebsd ≫ Freebsd Version 5.4 Update pre-release
Freebsd ≫ Freebsd Version 5.4 Update release
Freebsd ≫ Freebsd Version 5.4 Update releng
Freebsd ≫ Freebsd Version 5.4 Update stable
Freebsd ≫ Freebsd Version 6.0 Update release
Freebsd ≫ Freebsd Version 6.0 Update stable
Netbsd ≫ Netbsd Version 2.0
Netbsd ≫ Netbsd Version 3.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.8% 0.757
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:11.ipsec.asc
Patch
Vendor Advisory
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-011.txt.asc
http://secunia.com/advisories/19366
Patch
Vendor Advisory
http://securitytracker.com/id?1015809
http://www.osvdb.org/24068
http://www.securityfocus.com/bid/17191
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/25398