Vulnerability in Freebsd

CVE-2002-0414

KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.

EPSS: 0.014 (69.8th percentile) — read the EPSS interpretation.

Affected products

Freebsd — versions 4.2, 4.3, 4.4
Netbsd — versions 1.5, 1.5.1, 1.5.2
Openbsd — versions 2.6, 2.7
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)