CVE-2008-1335 Security feature bypass in n/a
Remote attackers can bypass IPsec policy protections in NetBSD kernels with fast_ipsec enabled by exploiting endianness differences in packet processing.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2008-1335?
CVE-2008-1335 is a critical vulnerability in Netbsd Netbsd, published on 13 Mar 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The ipsec4_get_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fast_ipsec subsystem is enabled, allows remote attackers to bypass the IPsec policy by sending packets from a source machine with a different endianness than the destination machine, a different vulnerability than CVE-2006-0905.
Which versions are affected by CVE-2008-1335?
It affects 2 products.
Products include Netbsd Netbsd, Netbsd Netbsd Current.
How do I fix CVE-2008-1335?
No fix has been published for CVE-2008-1335 yet. Limit exposure of the affected software until one is available.
Is CVE-2008-1335 being exploited?
There is no known exploitation of CVE-2008-1335 in the wild and no public exploit code.
Other vulnerabilities in Netbsd Netbsd
Sources
Also known as GHSA-h52m-p6c5-vq5f.