NVD

Id
79666  
Name
CVE-2002-0666  
Description
IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-05  
Published
2002-11-04  
Modified Date
2008-09-10  
Seq
2002-0666  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
397452 79666 CVE-2002-0666 NetBSD-SA2002-016  View
397453 79666 CVE-2002-0666 20021018 Denial of Service in IPSEC implementations  View
397454 79666 CVE-2002-0666 DSA-201  View
397455 79666 CVE-2002-0666 ipsec-packet-integer-overflow(10411)  View
397456 79666 CVE-2002-0666 VU#459371  View
397457 79666 CVE-2002-0666 6011  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63984 JVNDB-2002-000311 IBM AIX が実装する IPSec の esp4_input() 関数におけるカーネルパニックが発生する脆弱性 IBM AIX において、IPSec の esp4_input() 関数に、認証データの整合性チェックが適切に行われない脆弱性が存在します。 CVE-2002-0666 5056 CVE-2002-0666 79666 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000311.html 2002-12-11 2007-04-01 View