Vulnerabilities > CVE-2005-2359 - Authentication Constant Key Usage vulnerability in BSD IPsec Session AES-XCBC-MAC
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the system administrator, which can allow remote attackers to spoof packets to establish an IPsec session.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 2 |