CVE-2005-2359

CVE-2005-2359 describes a vulnerability in the AES-XCBC-MAC algorithm within IPsec in FreeBSD versions 5.3 and 5.4. When used for authentication without additional encryption, the system incorrectly uses a constant key instead of the administrator-assigned key. This flaw allows remote attackers to spoof packets and establish unauthorized IPsec sessions, leading to a potential integrity compromise. The vulnerability has a CVSS score of 5.0 (Medium), indicating a network-based attack with low complexity, requiring no authentication, and impacting integrity. Its EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Furthermore, there is no community discussion or media coverage surrounding this CVE, indicating a lack of widespread attention or exploitation.