PT-2002-1468 · Ietf+2 · Ipsec+2

Published 2002-08-12 · Updated 2008-09-05 · CVE-2002-0414

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetBSD version 1.5.2 FreeBSD version 4.5

Description The issue affects KAME-derived implementations of IPsec and could cause a Security Gateway that does not use Encapsulating Security Payload to forward forged IPv4 packets, due to improper consultation of the Security Policy Database.

Recommendations For NetBSD version 1.5.2, update the IPsec implementation to properly consult the Security Policy Database. For FreeBSD version 4.5, update the IPsec implementation to properly consult the Security Policy Database. As a temporary workaround, consider restricting the forwarding of IPv4 packets by the Security Gateway until a proper update is applied.

Fix

Related Identifiers

CVE-2002-0414

Affected Products

Freebsd

Ipsec

Netbsd

References · 7

• http://iss.net/security_center/static/8416.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0414 · Security Note
• http://securityfocus.com/archive/1/259598 · Vendor Advisory
• http://securityfocus.com/bid/4224 · Vendor Advisory
• http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0057.html · Note
• http://orange.kame.net/dev/cvsweb.cgi/kame/CHANGELOG · Note
• http://osvdb.org/5304 · Note