9.3

CVE-2008-1335

The ipsec4_get_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fast_ipsec subsystem is enabled, allows remote attackers to bypass the IPsec policy by sending packets from a source machine with a different endianness than the destination machine, a different vulnerability than CVE-2006-0905.

Data is provided by the National Vulnerability Database (NVD)
Netbsd ≫ Netbsd Version2.0
Netbsd ≫ Netbsd Version2.0.1
Netbsd ≫ Netbsd Version2.0.2
Netbsd ≫ Netbsd Version2.0.3
Netbsd ≫ Netbsd Version2.0.4
Netbsd ≫ Netbsd Version2.1
Netbsd ≫ Netbsd Version2.1.1
Netbsd ≫ Netbsd Version3.0
Netbsd ≫ Netbsd Version3.0.1
Netbsd ≫ Netbsd Version3.0.2
Netbsd ≫ Netbsd Version3.1
Netbsd ≫ Netbsd Version3.1 Updaterc1
Netbsd ≫ Netbsd Version3.1 Updaterc3
Netbsd ≫ Netbsd Current Version <= 20071027
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.3% 0.505
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C