Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2002-0666

IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.

Published

2002-11-04T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application frees_wan frees_wan 1.9 Yes
Application frees_wan frees_wan 1.9.1 Yes
Application frees_wan frees_wan 1.9.2 Yes
Application frees_wan frees_wan 1.9.3 Yes
Application frees_wan frees_wan 1.9.4 Yes
Application frees_wan frees_wan 1.9.5 Yes
Application frees_wan frees_wan 1.9.6 Yes
Operating System apple mac_os_x 10.2 Yes
Operating System apple mac_os_x_server 10.2 Yes
Operating System freebsd freebsd 4.6 Yes
Operating System freebsd freebsd 4.6 Yes
Operating System freebsd freebsd 4.6 Yes
Operating System netbsd netbsd 1.5 Yes
Operating System netbsd netbsd 1.5 Yes
Operating System netbsd netbsd 1.5 Yes
Operating System netbsd netbsd 1.5.1 Yes
Operating System netbsd netbsd 1.5.2 Yes
Operating System netbsd netbsd 1.5.3 Yes
Operating System netbsd netbsd 1.6 Yes
Hardware global_technology_associates gnat_box_firmware 3.1 Yes
Hardware global_technology_associates gnat_box_firmware 3.2 Yes
Hardware global_technology_associates gnat_box_firmware 3.3 Yes
Hardware nec bluefire_ix1035_router * Yes
Hardware nec ix1010 * Yes
Hardware nec ix1011 * Yes
Hardware nec ix1020 * Yes
Hardware nec ix1050 * Yes
Hardware nec ix2010 * Yes
References