Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8x3x-v4q7-cjjp

Опубликовано: 03 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the system administrator, which can allow remote attackers to spoof packets to establish an IPsec session.

The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the system administrator, which can allow remote attackers to spoof packets to establish an IPsec session.

EPSS

Процентиль: 58%
0.00364
Низкий

Связанные уязвимости

ubuntu
около 20 лет назад

The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the system administrator, which can allow remote attackers to spoof packets to establish an IPsec session.

nvd
около 20 лет назад

The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the system administrator, which can allow remote attackers to spoof packets to establish an IPsec session.

debian
около 20 лет назад

The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used ...

EPSS

Процентиль: 58%
0.00364
Низкий