VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 4, 2002· Updated Apr 16, 2026

CVE-2002-0666

CVE-2002-0666

Description

IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.

Affected products

28
  • NetBSD/NetBSD7 versions
    cpe:2.3:o:netbsd:netbsd:1.5:*:x86:*:*:*:*:*+ 6 more
    • cpe:2.3:o:netbsd:netbsd:1.5:*:x86:*:*:*:*:*
    • cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*
    • cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*
    • cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*
    • cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*
    • cpe:2.3:o:netbsd:netbsd:1.5:*:sh3:*:*:*:*:*
    • cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*
  • Frees Wan/Frees Wan7 versions
    cpe:2.3:a:frees_wan:frees_wan:1.9:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:frees_wan:frees_wan:1.9:*:*:*:*:*:*:*
    • cpe:2.3:a:frees_wan:frees_wan:1.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:frees_wan:frees_wan:1.9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:frees_wan:frees_wan:1.9.3:*:*:*:*:*:*:*
    • cpe:2.3:a:frees_wan:frees_wan:1.9.4:*:*:*:*:*:*:*
    • cpe:2.3:a:frees_wan:frees_wan:1.9.5:*:*:*:*:*:*:*
    • cpe:2.3:a:frees_wan:frees_wan:1.9.6:*:*:*:*:*:*:*
  • Apple Inc./Mac Os X
    cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*
  • Apple Inc./Mac Os X Server
    cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*
  • FreeBSD/FreeBSD3 versions
    cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*
  • Global Technology Associates/Gnat Box Firmware3 versions
    cpe:2.3:h:global_technology_associates:gnat_box_firmware:3.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:h:global_technology_associates:gnat_box_firmware:3.1:*:*:*:*:*:*:*
    • cpe:2.3:h:global_technology_associates:gnat_box_firmware:3.2:*:*:*:*:*:*:*
    • cpe:2.3:h:global_technology_associates:gnat_box_firmware:3.3:*:*:*:*:*:*:*
  • NEC/Bluefire Ix1035 Router
    cpe:2.3:h:nec:bluefire_ix1035_router:*:*:*:*:*:*:*:*
  • NEC/Ix1010
    cpe:2.3:h:nec:ix1010:*:*:*:*:*:*:*:*
  • NEC/Ix1011
    cpe:2.3:h:nec:ix1011:*:*:*:*:*:*:*:*
  • NEC/Ix1020
    cpe:2.3:h:nec:ix1020:*:*:*:*:*:*:*:*
  • NEC/Ix1050
    cpe:2.3:h:nec:ix1050:*:*:*:*:*:*:*:*
  • NEC/Ix2010
    cpe:2.3:h:nec:ix2010:*:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.