Vulnerability in Apple Mac Os X
CVE-2002-0666
IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.
EPSS: 0.025 (82.9th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x — versions 10.2
- Apple Mac_os_x_server — versions 10.2
- Freebsd — versions 4.6
- Frees_wan — versions 1.9, 1.9.1, 1.9.2
- Global_technology_associates Gnat_box_firmware — versions 3.1, 3.2, 3.3
- Nec Bluefire_ix1035_router
- Nec Ix1010
- Nec Ix1011
- Nec Ix1020
- Nec Ix1050
References
- cve@mitre.org (x_refsource_BINDVIEW, vendor-advisory, Vendor Advisory)
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)