CVE-2006-0905: High severity FreeBSD FreeBSD vulnerability
A "programming error" in fastipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and conduct replay attacks.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0905?
CVE-2006-0905 has a moderate severity level due to its potential to allow attackers to capture IPSec packets.
How do I fix CVE-2006-0905?
To address CVE-2006-0905, users should upgrade to the latest stable versions of FreeBSD or NetBSD that contain the security fixes.
Which systems are affected by CVE-2006-0905?
CVE-2006-0905 affects FreeBSD versions 4.8-RELEASE through 6.1-STABLE and NetBSD versions 2 through 3.
What attack vector does CVE-2006-0905 exploit?
CVE-2006-0905 exploits a programming error that allows packets to bypass sequence number checks in IPSec.
Are there any known exploits for CVE-2006-0905?
Yes, there are known exploits for CVE-2006-0905 that enable remote attackers to capture sensitive IPSec packets.