CVE-2006-0905

Published: Mar 23, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

A "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and conduct replay attacks.

Affected (38)

Products: Freebsd: Freebsd · Netbsd: Netbsd

1 product

1 product

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 4.10
Freebsd Freebsd	Version 4.10 release
Freebsd Freebsd	Version 4.10 release_p8
Freebsd Freebsd	Version 4.10 releng
Freebsd Freebsd	Version 4.11 release_p3
Freebsd Freebsd	Version 4.11 releng
Freebsd Freebsd	Version 4.11 stable
Freebsd Freebsd	Version 4.8
Freebsd Freebsd	Version 4.8 pre-release
Freebsd Freebsd	Version 4.8 release_p7
Freebsd Freebsd	Version 4.8 releng
Freebsd Freebsd	Version 4.9
Freebsd Freebsd	Version 4.9 pre-release
Freebsd Freebsd	Version 4.9 releng
Freebsd Freebsd	Version 5.0
Freebsd Freebsd	Version 5.0 alpha
Freebsd Freebsd	Version 5.0 release_p14
Freebsd Freebsd	Version 5.0 releng
Freebsd Freebsd	Version 5.1
Freebsd Freebsd	Version 5.1 alpha
Freebsd Freebsd	Version 5.1 release
Freebsd Freebsd	Version 5.1 release_p5
Freebsd Freebsd	Version 5.1 releng
Freebsd Freebsd	Version 5.2.1 release
Freebsd Freebsd	Version 5.2.1 releng
Freebsd Freebsd	Version 5.2
Freebsd Freebsd	Version 5.3
Freebsd Freebsd	Version 5.3 release
Freebsd Freebsd	Version 5.3 releng
Freebsd Freebsd	Version 5.3 stable
Freebsd Freebsd	Version 5.4 pre-release
Freebsd Freebsd	Version 5.4 release
Freebsd Freebsd	Version 5.4 releng
Freebsd Freebsd	Version 5.4 stable
Freebsd Freebsd	Version 6.0 release
Freebsd Freebsd	Version 6.0 stable
Netbsd Netbsd	Version 2.0
Netbsd Netbsd	Version 3.0