Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the system administrator, which can allow remote attackers to spoof packets to establish an IPsec session.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeBSD IPsec会话AES-XCBC-MAC认证常量密钥漏洞
Vulnerability Description
FreeBSD就是一种运行在Intel平台上、可以自由使用的Unix系统；IPsec是FreeBSD所使用的一种Internet协议网络层安全协议。 FreeBSD用于认证的AES-XCBC-MAC算法实现中存在编程错误，可能导致使用常量密钥而不是系统管理员所指定的密钥。 如果缺少加密而使用AES-XCBC-MAC算法进行认证的话，攻击者就可以创建看起来源自不同系统的报文，因此就可以成功创建IPsec会话。如果攻击者根据源系统的身份控制了对敏感信息或系统的访问，就可能导致信息泄漏或权限提升。
CVSS Information
N/A
Vulnerability Type
N/A