CVE-2002-0666

Current Description

IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.

Basic Data

Published	November 04, 2002
Last Modified	September 10, 2008
Assigner	cve@mitre.org
Data Type	CVE
Data Format	MITRE
Data Version	4.0
Problem Type	NVD-CWE-Other
CVE Data Version	4.0

Base Metric V2

CVSS 2 - Version	2.0
CVSS 2 - Vector String	AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS 2 - Access Vector	NETWORK
CVSS 2 - Access Complexity	LOW
CVSS 2 - Authentication	NONE
CVSS 2 - Confidentiality Impact	NONE
CVSS 2 - Availability Impact	PARTIAL
CVSS 2 - Base Score	5.0
Severity	MEDIUM
Exploitability Score	10.0
Impact Score	2.9
Obtain All Privilege	false
Obtain User Privilege	false
Obtain Other Privilege	false

Base Metric V3

No data provided.

Configurations

OR - Configuration 1

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other
2.3	Application	Frees Wan	Frees Wan	1.9	*	*	*	*	*	*	*
2.3	Application	Frees Wan	Frees Wan	1.9.1	*	*	*	*	*	*	*
2.3	Application	Frees Wan	Frees Wan	1.9.2	*	*	*	*	*	*	*
2.3	Application	Frees Wan	Frees Wan	1.9.3	*	*	*	*	*	*	*
2.3	Application	Frees Wan	Frees Wan	1.9.4	*	*	*	*	*	*	*
2.3	Application	Frees Wan	Frees Wan	1.9.5	*	*	*	*	*	*	*
2.3	Application	Frees Wan	Frees Wan	1.9.6	*	*	*	*	*	*	*

OR - Configuration 2

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other
2.3	OS	Apple	Mac Os X	10.2	*	*	*	*	*	*	*
2.3	OS	Apple	Mac Os X Server	10.2	*	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	4.6	*	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	4.6	release	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	4.6	stable	*	*	*	*	*	*
2.3	OS	Netbsd	Netbsd	1.5	*	*	*	*	*	*	*
2.3	OS	Netbsd	Netbsd	1.5	*	sh3	*	*	*	*	*
2.3	OS	Netbsd	Netbsd	1.5	*	x86	*	*	*	*	*
2.3	OS	Netbsd	Netbsd	1.5.1	*	*	*	*	*	*	*
2.3	OS	Netbsd	Netbsd	1.5.2	*	*	*	*	*	*	*
2.3	OS	Netbsd	Netbsd	1.5.3	*	*	*	*	*	*	*
2.3	OS	Netbsd	Netbsd	1.6	beta	*	*	*	*	*	*

OR - Configuration 3

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other
2.3	Hardware	Global Technology Associates	Gnat Box Firmware	3.1	*	*	*	*	*	*	*
2.3	Hardware	Global Technology Associates	Gnat Box Firmware	3.2	*	*	*	*	*	*	*
2.3	Hardware	Global Technology Associates	Gnat Box Firmware	3.3	*	*	*	*	*	*	*
2.3	Hardware	Nec	Bluefire Ix1035 Router	*	*	*	*	*	*	*	*
2.3	Hardware	Nec	Ix1010	*	*	*	*	*	*	*	*
2.3	Hardware	Nec	Ix1011	*	*	*	*	*	*	*	*
2.3	Hardware	Nec	Ix1020	*	*	*	*	*	*	*	*
2.3	Hardware	Nec	Ix1050	*	*	*	*	*	*	*	*
2.3	Hardware	Nec	Ix2010	*	*	*	*	*	*	*	*

Vulnerable Software List

Vendor	Product	Versions
Apple	Mac Os X Server	10.2
Apple	Mac Os X	10.2
Freebsd	Freebsd	4.6
Nec	Ix1050	*
Nec	Ix2010	*
Nec	Bluefire Ix1035 Router	*
Nec	Ix1010	*
Nec	Ix1011	*
Nec	Ix1020	*
Netbsd	Netbsd	1.5, 1.5.1, 1.5.2, 1.5.3, 1.6
Frees Wan	Frees Wan	1.9, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6
Global Technology Associates	Gnat Box Firmware	3.1, 3.2, 3.3

References

Name	Source	URL	Tags
NetBSD-SA2002-016	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-016.txt.asc	NETBSD
20021018 Denial of Service in IPSEC implementations	http://razor.bindview.com/publish/advisories/adv_ipsec.html	BINDVIEW	Vendor Advisory
DSA-201	http://www.debian.org/security/2002/dsa-201	DEBIAN
ipsec-packet-integer-overflow(10411)	http://www.iss.net/security_center/static/10411.php	XF	Vendor Advisory
VU#459371	http://www.kb.cert.org/vuls/id/459371	CERT-VN	Third Party Advisory US Government Resource
6011	http://www.securityfocus.com/bid/6011	BID