Vulnerability Database

299,879

Total vulnerabilities in the database

CVE-2008-1335

The ipsec4_get_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fast_ipsec subsystem is enabled, allows remote attackers to bypass the IPsec policy by sending packets from a source machine with a different endianness than the destination machine, a different vulnerability than CVE-2006-0905.

  • Published: Mar 13, 2008
  • Updated: Nov 9, 2025
  • CVE: CVE-2008-1335
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
netbsd / netbsd 2.0.4 2.0.4.x
netbsd / netbsd 2.1 2.1.x
netbsd / netbsd 3.1-rc3 3.1-rc3.x
netbsd / netbsd 2.0.2 2.0.2.x
netbsd / netbsd 3.0.1 3.0.1.x
netbsd / netbsd_current - 20071027.x
netbsd / netbsd 2.0.3 2.0.3.x
netbsd / netbsd 3.0.2 3.0.2.x
netbsd / netbsd 2.1.1 2.1.1.x
netbsd / netbsd 2.0.1 2.0.1.x
netbsd / netbsd 3.1 3.1.x
netbsd / netbsd 3.0 3.0.x
netbsd / netbsd 2.0 2.0.x
netbsd / netbsd 3.1-rc1 3.1-rc1.x