3627 matches found
CVE-2002-0414
KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database SPD, which could cause a Security Gateway SG that does not use Encapsulating Security Payload ESP to forward forged IPv4 packets...
BSD: IPv4 forwarding doesn't consult inbound SPD in KAME-derived IPsec
IPv4 forwarding doesn't consult inbound SPD in KAME-derived IPsec Greg Troxel [email protected] Bill Chiarchiaro [email protected] 2002-02-24 SUMMARY NetBSD 1.5.2 and -current, FreeBSD 4.5 and -current, and the KAME versions of NetBSD and FreeBSD fail to perform inbound policy checks on packets...
Security Advisory FreeBSD-SA-01:52.fragment
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:52 Security Advisory FreeBSD, Inc. Topic: Denial of service using fragmented IPv4 packets Category: kernel Announced: 2001-08-06 Credits: "James Thomas" via NetBSD Affect...
CVE-2001-0284
The CVE-2001-0284 entry describes a buffer overflow in the IPSEC authentication mechanism for OpenBSD 2.8 and earlier. The underlying issue is in the IPSEC AH (IPv4 option) processing, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands via a malforme...
FreeBSD 3.x/4.x - 'ipfw' Filtering Evasion
source: www.securityfocus.com/bid/2293/info There exists a serious vulnerability in FreeBSD's implementation of packet filtering for IPv4 and IPv6. The vulnerability exists in situations where a filtering rule permits packets through if they are part of an established connection. It is possible f...
