Skip to content
OpenAdvisories
Unscored CVE-2006-0905 EUVD-2006-0909GHSA-p5cr-7f6f-r5wg

A "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence …

Published Mar 23, 2006 · Updated Aug 7, 2024 · Assigned by freebsd

Description

A "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and conduct replay attacks.

References