Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header (AH) IPv4 option.Referenceshttp://www.openbsd.org/errata.html#ipsec_ahhttp://www.osvdb.org/6026