BSD IPsec Session AES-XCBC-MAC Authentication Constant Key Usage Vulnerability

BID:14394

Info

BSD IPsec Session AES-XCBC-MAC Authentication Constant Key Usage Vulnerability

Bugtraq ID: 14394
Class: Design Error
CVE: CVE-2005-2359
Remote: Yes
Local: No
Published: Jul 27 2005 12:00AM
Updated: Jul 12 2009 04:06PM
Credit: The vendor reported this issue.
Vulnerable: NetBSD NetBSD 2.0.2
NetBSD NetBSD 2.0.1
NetBSD NetBSD 2.0
FreeBSD FreeBSD 5.4 -RELENG
FreeBSD FreeBSD 5.4 -RELEASE
FreeBSD FreeBSD 5.4 -PRERELEASE
FreeBSD FreeBSD 5.3 -STABLE
FreeBSD FreeBSD 5.3 -RELENG
FreeBSD FreeBSD 5.3 -RELEASE
FreeBSD FreeBSD 5.3
Not Vulnerable:

Discussion

BSD IPsec Session AES-XCBC-MAC Authentication Constant Key Usage Vulnerability

BSD is affected by a vulnerability that may allow remote unauthorized attackers to establish an IPsec session.

The vulnerability presents itself when the 'AES-XCBC-MAC' algorithm is used for authentication without any other method of IPsec encryption.

A successful attack can allow an attacker to forge packets and potentially establish an IPsec session. This can lead to various other attacks.

Exploit / POC

BSD IPsec Session AES-XCBC-MAC Authentication Constant Key Usage Vulnerability

An exploit is not required.

Solution / Fix

BSD IPsec Session AES-XCBC-MAC Authentication Constant Key Usage Vulnerability

Solution:
FreeBSD advisory FreeBSD-SA-05:19.ipsec is available to address this issue. Please see the referenced advisory for more information.

Patches are available for FreeBSD 5.3 and 5.4.

A patch is available for NetBSD 2.x versions from the KAME Project.


NetBSD NetBSD 2.0

NetBSD NetBSD 2.0.1

NetBSD NetBSD 2.0.2

FreeBSD FreeBSD 5.3 -RELENG

FreeBSD FreeBSD 5.4 -RELENG

References

BSD IPsec Session AES-XCBC-MAC Authentication Constant Key Usage Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report