CVE

Id
13565  
CVE No.
CVE-2005-2359  
Status
Candidate  
Description
The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the system administrator, which can allow remote attackers to spoof packets to establish an IPsec session.  
Phase
Assigned (20050726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
98239 13565 CVE-2005-2359 FREEBSD:FreeBSD-SA-05:19  View
98240 13565 CVE-2005-2359 URL:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:19.ipsec.asc  View
98241 13565 CVE-2005-2359 BID:14394  View
98242 13565 CVE-2005-2359 URL:http://www.securityfocus.com/bid/14394  View
98243 13565 CVE-2005-2359 SECTRACK:1014586  View
98244 13565 CVE-2005-2359 URL:http://securitytracker.com/id?1014586  View
98245 13565 CVE-2005-2359 SECUNIA:16244  View
98246 13565 CVE-2005-2359 URL:http://secunia.com/advisories/16244/  View
98247 13565 CVE-2005-2359 XF:freebsd-aesxcbcmac-security-bypass(21551)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62249 JVNDB-2005-000451 Ethereal における複数のサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2005-2361 13565 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000451.html  View