CVE-2008-1335

The ipsec4_get_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fast_ipsec subsystem is enabled, allows remote attackers to bypass the IPsec policy by sending packets from a source machine with a different endianness than the destination machine, a different vulnerability than CVE-2006-0905.

Link	Resource
ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2008-002.txt.asc
http://securitytracker.com/id?1019533
http://www.securityfocus.com/bid/28045
http://secunia.com/advisories/29180

Configuration 1

cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:3.1:rc3:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:3.0.1:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd_current:*:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:3.0.2:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:2.1.1:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:3.1:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:3.1:rc1:*:*:*:*:*:*

---

Published : 2008-03-13 06:44

Updated : 2008-12-10 06:34

---

NVD link : CVE-2008-1335

Mitre link : CVE-2008-1335

No products.

NVD-CWE-Other