CVE-2008-1335

2008-03-1318:44:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

netbsd

kernel

ipsec

remote attackers

vulnerability

endianness

bypass

ipsec policy

6.7 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.008 Low

EPSS

Percentile

81.4%

JSON

The ipsec4_get_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fast_ipsec subsystem is enabled, allows remote attackers to bypass the IPsec policy by sending packets from a source machine with a different endianness than the destination machine, a different vulnerability than CVE-2006-0905.

CPENameOperatorVersion
netbsd:netbsdnetbsdeq2.0.4
netbsd:netbsdnetbsdeq2.1
netbsd:netbsdnetbsdeq3.1
netbsd:netbsdnetbsdeq2.0.2
netbsd:netbsdnetbsdeq3.0.1
netbsd:netbsd_currentnetbsd netbsd currentle20071027
netbsd:netbsdnetbsdeq2.0.3
netbsd:netbsdnetbsdeq3.0.2
netbsd:netbsdnetbsdeq2.1.1
netbsd:netbsdnetbsdeq2.0.1

CPE	Name	Operator	Version
netbsd:netbsd	netbsd	eq	2.0.4
netbsd:netbsd	netbsd	eq	2.1
netbsd:netbsd	netbsd	eq	3.1
netbsd:netbsd	netbsd	eq	2.0.2
netbsd:netbsd	netbsd	eq	3.0.1
netbsd:netbsd_current	netbsd netbsd current	le	20071027
netbsd:netbsd	netbsd	eq	2.0.3
netbsd:netbsd	netbsd	eq	3.0.2
netbsd:netbsd	netbsd	eq	2.1.1
netbsd:netbsd	netbsd	eq	2.0.1