CVE-2002-0414: Freebsd

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.

Affected products

• Freebsd Freebsd: version 4.2 only; version 4.3 only; version 4.4 only; version 4.5 only
• Netbsd Netbsd: version 1.5 only; version 1.5.1 only; version 1.5.2 only
• OpenBSD OpenBSD: version 2.6 only; version 2.7 only

Published 2002-08-12. Last modified 2026-06-16.