VULNERABILITY INTELLIGENCE
CVE-2005-2359
CVSS score5 MEDIUM
EPSS probability0.91%
CISA KEVNot currently listed
Published2005-08-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the system administrator, which can allow remote attackers to spoof packets to establish an IPsec session.