SSH Communications Security Information for VU#459371

=======================================

Multiple IPSec implementations do not adequately validate
authentication data:

    CERT/CC has announced a new vulnerability on IPSec (see the
    "Vulnerability Note VU#459371" referred). Based on our review, SSH
    IPSEC Express Toolkit 4.x/5.x and SSH QuickSec Toolkit 1.x are not
    vulnerable to the attack described. The sanity check relevant for
    this functionality is located in the transform code of the IPSec
    packet processing.

    More information can be found at:

     http://www.kb.cert.org/vuls/id/459371

    This vulnerability has been assigned CAN-2002-0666 by CVE.

Vendor Information

If you have feedback, comments, or additional information about this vulnerability, please send us email.