CVE-2002-0414: High severity netbsd netbsd vulnerability
KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0414?
CVE-2002-0414 has a moderate severity level due to its potential to allow forged packet forwarding.
How do I fix CVE-2002-0414?
To fix CVE-2002-0414, update your NetBSD, FreeBSD, or OpenBSD systems to versions that correct the Security Policy Database consulting issue.
What systems are affected by CVE-2002-0414?
CVE-2002-0414 affects NetBSD 1.5.2, FreeBSD 4.5, and certain other KAME-derived implementations.
What type of attack does CVE-2002-0414 enable?
CVE-2002-0414 can enable attackers to forward forged IPv4 packets through Security Gateways.
What is the cause of CVE-2002-0414?
CVE-2002-0414 is caused by improper consultation of the Security Policy Database in the affected IPsec implementations.