← Back

CVE-2002-0666

nvd nist
Published: Nov 4, 2002Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.

Affected (28)

Show all products
Frees Wan: Frees Wan · Apple: Mac Os X, Mac Os X Server · Freebsd: Freebsd · Netbsd: Netbsd · Global Technology Associates: Gnat Box Firmware · Nec: Bluefire Ix1035 Router, Ix1010, Ix1011, Ix1020, Ix1050, Ix2010
Frees Wan
1 product
Frees Wan
Apple
2 products
Mac Os X
Mac Os X Server
Freebsd
1 product
Freebsd
Netbsd
1 product
Netbsd
Global Technology Associates
1 product
Gnat Box Firmware
Nec
6 products
Bluefire Ix1035 Router
Ix1010
Ix1011
Ix1020
Ix1050
Ix2010
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Frees Wan
Frees Wan
Version 1.9.1
Frees Wan
Version 1.9.2
Frees Wan
Version 1.9.3
Frees Wan
Version 1.9.4
Frees Wan
Version 1.9.5
Frees Wan
Version 1.9.6
Frees Wan
Version 1.9
Configuration B
12 vulnerable
Vulnerable SoftwareAffected Versions
Mac Os X
Version 10.2
Mac Os X Server
Version 10.2
Freebsd
Freebsd
Version 4.6
Freebsd
Version 4.6 release
Freebsd
Version 4.6 stable
Netbsd
Netbsd
Version 1.5.1
Netbsd
Version 1.5.2
Netbsd
Version 1.5.3
Netbsd
Version 1.5
Netbsd
Version 1.5
Netbsd
Version 1.5
Netbsd
Version 1.6 beta
Configuration C
9 vulnerable
Vulnerable SoftwareAffected Versions
Gnat Box Firmware
Version 3.1
Gnat Box Firmware
Version 3.2
Gnat Box Firmware
Version 3.3
Bluefire Ix1035 Router
All versions
Ix1010
All versions
Ix1011
All versions
Ix1020
All versions
Ix1050
All versions
Ix2010
All versions

References (12)

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-016.txt.asc (unsafe URL)
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Third Party AdvisoryUS Government Resource
Source: cve@mitre.org
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-016.txt.asc (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.