Lucene search

[email protected]CVE-2002-0414

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0414

2003-04-0205:00:00

[email protected]

web.nvd.nist.gov

cve-2002-0414

kame

ipsec

netbsd 1.5.2

freebsd 4.5

spd

forged ipv4 packets

nvd.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

JSON

KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.

Affected configurations

NVD

Node

freebsdfreebsdMatch4.2

freebsdfreebsdMatch4.3

freebsdfreebsdMatch4.4

freebsdfreebsdMatch4.5

netbsdnetbsdMatch1.5

netbsdnetbsdMatch1.5.1

netbsdnetbsdMatch1.5.2

openbsdopenbsdMatch2.6

openbsdopenbsdMatch2.7

CPENameOperatorVersion
freebsd:freebsdfreebsdeq4.2
freebsd:freebsdfreebsdeq4.3
freebsd:freebsdfreebsdeq4.4
freebsd:freebsdfreebsdeq4.5
netbsd:netbsdnetbsdeq1.5
netbsd:netbsdnetbsdeq1.5.1
netbsd:netbsdnetbsdeq1.5.2
openbsd:openbsdopenbsdeq2.6
openbsd:openbsdopenbsdeq2.7

CPE	Name	Operator	Version
freebsd:freebsd	freebsd	eq	4.2
freebsd:freebsd	freebsd	eq	4.3
freebsd:freebsd	freebsd	eq	4.4
freebsd:freebsd	freebsd	eq	4.5
netbsd:netbsd	netbsd	eq	1.5
netbsd:netbsd	netbsd	eq	1.5.1
netbsd:netbsd	netbsd	eq	1.5.2
openbsd:openbsd	openbsd	eq	2.6
openbsd:openbsd	openbsd	eq	2.7

References

archives.neohapsis.com/archives/vulnwatch/2002-q1/0057.html

orange.kame.net/dev/cvsweb.cgi/kame/CHANGELOG

www.iss.net/security_center/static/8416.php

www.osvdb.org/5304

www.securityfocus.com/archive/1/259598

www.securityfocus.com/bid/4224

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

JSON

Related for CVE-2002-0414

cvelist1 nvd1