CVEvulnerability

CVE-2002-0666

5.0 MEDIUM Published 2002-11-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-11-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.

Affected configurations

• frees wan frees wan 1.9 • frees wan frees wan 1.9.1 • frees wan frees wan 1.9.2 • frees wan frees wan 1.9.3 • frees wan frees wan 1.9.4 • frees wan frees wan 1.9.5 • frees wan frees wan 1.9.6 • apple mac os x 10.2 • apple mac os x server 10.2 • freebsd freebsd 4.6 • netbsd netbsd 1.5 • netbsd netbsd 1.5.1 • netbsd netbsd 1.5.2 • netbsd netbsd 1.5.3 • netbsd netbsd 1.6 • global technology associates gnat box firmware 3.1 • global technology associates gnat box firmware 3.2 • global technology associates gnat box firmware 3.3 • nec bluefire ix1035 router • nec ix1010 • nec ix1011 • nec ix1020 • nec ix1050 • nec ix2010

References