PT-2002-1468 · Ietf+2 · Ipsec+2

Publicado 2002-08-12 · Atualizado 2008-09-05 · CVE-2002-0414

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetBSD version 1.5.2 FreeBSD version 4.5

Description The issue affects KAME-derived implementations of IPsec and could cause a Security Gateway that does not use Encapsulating Security Payload to forward forged IPv4 packets, due to improper consultation of the Security Policy Database.

Recommendations For NetBSD version 1.5.2, update the IPsec implementation to properly consult the Security Policy Database. For FreeBSD version 4.5, update the IPsec implementation to properly consult the Security Policy Database. As a temporary workaround, consider restricting the forwarding of IPv4 packets by the Security Gateway until a proper update is applied.

Correção

Identificadores relacionados

CVE-2002-0414

Produtos afetados

Freebsd

Ipsec

Netbsd

Referências · 7

• http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0057.html · Nota
• http://orange.kame.net/dev/cvsweb.cgi/kame/CHANGELOG · Nota
• http://iss.net/security_center/static/8416.php · Aviso do Fabricante
• http://osvdb.org/5304 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0414 · Nota de Segurança
• http://securityfocus.com/archive/1/259598 · Aviso do Fabricante
• http://securityfocus.com/bid/4224 · Aviso do Fabricante