PT-2008-1823 · Kame · Kame Project

Mu-B + 1 · Published 2008-02-07 · Updated 2017-09-29 · CVE-2008-0177

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions KAME project versions prior to 20071201

Description The issue is related to the ipcomp6 input function in the KAME project, which does not properly check the return value of the m pulldown function. This allows remote attackers to cause a denial of service, resulting in a system crash, via an IPv6 packet with an IPComp header.

Recommendations For versions prior to 20071201, update to a version released after 20071201 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2008-0177

Affected Products

Kame Project

References · 22

• 🔥 https://exploit-db.com/exploits/5191 · Exploit
• 🔥 http://kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ipcomp_input.c.diff?r1=1.36;r2=1.37 · Exploit
• http://secunia.com/advisories/28788 · Vendor Advisory
• http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/ipcomp_input.c?f=u&only_with_tag=netbsd-3-1 · Vendor Advisory
• http://securityfocus.com/bid/27642 · Patch
• http://secunia.com/advisories/28816 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0177 · Security Note
• http://security.freebsd.org/advisories/FreeBSD-SA-08:04.ipsec.asc · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2008//May/msg00001.html · Vendor Advisory
• http://secunia.com/advisories/28979 · Note
• http://vupen.com/english/advisories/2008/1697 · Note
• http://securitytracker.com/id?1019314 · Note
• http://secunia.com/advisories/31074 · Note
• http://secunia.com/advisories/30430 · Note