CVE-2005-2359: Freebsd

Medium severity, CVSS 5.0. EPSS: 0.9% chance of exploitation in the next 30 days.

The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the system administrator, which can allow remote attackers to spoof packets to establish an IPsec session.

Affected products

• Freebsd Freebsd: version 5.3 only; version 5.4 only

Published 2005-08-05. Last modified 2026-06-16.