Unscored CVE-2005-2359 EUVD-2005-2360GHSA-8x3x-v4q7-cjjp

The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key inst…

Published Aug 1, 2005 · Updated Aug 7, 2024 · Assigned by freebsd

Description

The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the system administrator, which can allow remote attackers to spoof packets to establish an IPsec session.

References

16244 third-party-advisory
freebsd-aesxcbcmac-security-bypass(21551) vdb-entry
14394 vdb-entry
1014586 vdb-entry