CVE-2002-2222

Description

isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows remote attackers to cause a denial of service (crash) by sending Internet Key Exchange (IKE) payloads out of sequence.

Affected products

• FreeBSD / ports_collection2002-08-28
• OpenBSD / OpenBSD3.1 – 3.1

References

• VENDOR_ADVISORYftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc
• MISChttp://www.openbsd.org/errata31.html#isakmpd
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/9850
• MISChttp://www.kb.cert.org/vuls/id/287771