7.5

CVE-2006-0905

A "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and conduct replay attacks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version4.8
Freebsd ≫ Freebsd Version4.8 Updatepre-release
Freebsd ≫ Freebsd Version4.8 Updaterelease_p7
Freebsd ≫ Freebsd Version4.8 Updatereleng
Freebsd ≫ Freebsd Version4.9
Freebsd ≫ Freebsd Version4.9 Updatepre-release
Freebsd ≫ Freebsd Version4.9 Updatereleng
Freebsd ≫ Freebsd Version4.10
Freebsd ≫ Freebsd Version4.10 Updaterelease
Freebsd ≫ Freebsd Version4.10 Updaterelease_p8
Freebsd ≫ Freebsd Version4.10 Updatereleng
Freebsd ≫ Freebsd Version4.11 Updaterelease_p3
Freebsd ≫ Freebsd Version4.11 Updatereleng
Freebsd ≫ Freebsd Version4.11 Updatestable
Freebsd ≫ Freebsd Version5.0
Freebsd ≫ Freebsd Version5.0 Updatealpha
Freebsd ≫ Freebsd Version5.0 Updaterelease_p14
Freebsd ≫ Freebsd Version5.0 Updatereleng
Freebsd ≫ Freebsd Version5.1
Freebsd ≫ Freebsd Version5.1 Updatealpha
Freebsd ≫ Freebsd Version5.1 Updaterelease
Freebsd ≫ Freebsd Version5.1 Updaterelease_p5
Freebsd ≫ Freebsd Version5.1 Updatereleng
Freebsd ≫ Freebsd Version5.2
Freebsd ≫ Freebsd Version5.2.1 Updaterelease
Freebsd ≫ Freebsd Version5.2.1 Updatereleng
Freebsd ≫ Freebsd Version5.3
Freebsd ≫ Freebsd Version5.3 Updaterelease
Freebsd ≫ Freebsd Version5.3 Updatereleng
Freebsd ≫ Freebsd Version5.3 Updatestable
Freebsd ≫ Freebsd Version5.4 Updatepre-release
Freebsd ≫ Freebsd Version5.4 Updaterelease
Freebsd ≫ Freebsd Version5.4 Updatereleng
Freebsd ≫ Freebsd Version5.4 Updatestable
Freebsd ≫ Freebsd Version6.0 Updaterelease
Freebsd ≫ Freebsd Version6.0 Updatestable
Netbsd ≫ Netbsd Version2.0
Netbsd ≫ Netbsd Version3.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.8% 0.757
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:11.ipsec.asc
Patch
Vendor Advisory
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-011.txt.asc
http://secunia.com/advisories/19366
Patch
Vendor Advisory
http://securitytracker.com/id?1015809
http://www.osvdb.org/24068
http://www.securityfocus.com/bid/17191
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/25398