CVE:CVE-2006-0905
CNNVD:CNNVD-200603-382
FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。
FreeBSD的IPsec实现的反回放攻击服务存在漏洞，远程攻击者可能利用此漏洞。
IPsec提供了反回放攻击服务，如果启用了该服务就可以防止攻击者成功执行回放攻击。这是通过验证序列号来实现的。fast_ipsec(4)实现中存在编程错误，导致没有升级序列号相关的安全关联，允许报文无条件的通过序列号验证检查。攻击者可以拦截IPSec报文并回放。如果使用了无法提供任何报文回放防范措施的更高级别协议(如UDP)，还可能有其他影响。
solution:Upgrade freebsd freebsd to a higher version than 4.8,4.8:pre-release,4.8:release_p7,4.8:releng,4.9,4.9:pre-release,4.9:releng,4.10,4.10:release,4.10:release_p8,4.10:releng,4.11:release_p3,4.11:releng,4.11:stable,5.0,5.0:alpha,5.0:release_p14,5.0:releng,5.1,5.1:alpha,5.1:release,5.1:release_p5,5.1:releng,5.2,5.2.1:release,5.2.1:releng,5.3,5.3:release,5.3:releng,5.3:stable,5.4:pre-release,5.4:release,5.4:releng,5.4:stable,6.0:release,6.0:stable,and avoid the version 4.8,4.8:pre-release,4.8:release_p7,4.8:releng,4.9,4.9:pre-release,4.9:releng,4.10,4.10:release,4.10:release_p8,4.10:releng,4.11:release_p3,4.11:releng,4.11:stable,5.0,5.0:alpha,5.0:release_p14,5.0:releng,5.1,5.1:alpha,5.1:release,5.1:release_p5,5.1:releng,5.2,5.2.1:release,5.2.1:releng,5.3,5.3:release,5.3:releng,5.3:stable,5.4:pre-release,5.4:release,5.4:releng,5.4:stable,6.0:release,6.0:stable; Upgrade netbsd netbsd to a higher version than 2.0,3.0,and avoid the version 2.0,3.0