CVE

Id
5056  
CVE No.
CVE-2002-0666  
Status
Candidate  
Description
IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.  
Phase
Modified (20050601)  
Votes
ACCEPT(3) Baker, Cole, Frech | NOOP(3) Christey, Cox, Wall  
Comments
Christey> DEBIAN:DSA-201  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26487 5056 CVE-2002-0666 BINDVIEW:20021018 Denial of Service in IPSEC implementations  View
26488 5056 CVE-2002-0666 URL:http://razor.bindview.com/publish/advisories/adv_ipsec.html  View
26489 5056 CVE-2002-0666 DEBIAN:DSA-201  View
26490 5056 CVE-2002-0666 URL:http://www.debian.org/security/2002/dsa-201  View
26491 5056 CVE-2002-0666 NETBSD:NetBSD-SA2002-016  View
26492 5056 CVE-2002-0666 URL:ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-016.txt.asc  View
26493 5056 CVE-2002-0666 CERT-VN:VU#459371  View
26494 5056 CVE-2002-0666 URL:http://www.kb.cert.org/vuls/id/459371  View
26495 5056 CVE-2002-0666 BID:6011  View
26496 5056 CVE-2002-0666 URL:http://www.securityfocus.com/bid/6011  View
26497 5056 CVE-2002-0666 XF:ipsec-packet-integer-overflow(10411)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63984 JVNDB-2002-000311 IBM AIX が実装する IPSec の esp4_input() 関数におけるカーネルパニックが発生する脆弱性 IBM AIX において、IPSec の esp4_input() 関数に、認証データの整合性チェックが適切に行われない脆弱性が存在します。 CVE-2002-0666 5056 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000311.html  View