NVD

Id
1294  
Name
CVE-2008-1335  
Description
The ipsec4_get_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fast_ipsec subsystem is enabled, allows remote attackers to bypass the IPsec policy by sending packets from a source machine with a different endianness than the destination machine, a different vulnerability than CVE-2006-0905.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-03-13  
Modified Date
2008-12-10  
Seq
2008-1335  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8154 1294 CVE-2008-1335 NetBSD-SA2008-002  View
8155 1294 CVE-2008-1335 1019533  View
8156 1294 CVE-2008-1335 28045  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48921 JVNDB-2008-004231 NetBSD の カーネルにおける IPsec ポリシーを回避される脆弱性 NetBSD のカーネルの ipsec4_get_ulp 関数には、fast_ipsec サブシステムが有効になっている際、IPsec ポリシーを回避される脆弱性が存在します。 CVE-2008-1335 31448 CVE-2008-1335 1294 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004231.html 2008-02-28 2012-09-25 View