← Database

CVE-2002-0666

MEDIUM CVSS: 5.0 Published: 2002-11-04 Modified: 2026-06-16

Description

IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.

Affected Platforms

Frees Wan Frees WanNec Ix1010Freebsd FreebsdNetbsd NetbsdNec Ix2010Nec Ix1050Apple Mac Os XNec Bluefire Ix1035 RouterNec Ix1020Global Technology Associates Gnat Box Firmware

Weakness Type

NVD-CWE-Other

References