[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253928

 
 

909

 
 

198006

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2001-0183Date: (C)2001-03-26   (M)2023-12-22


ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
OSVDB-1743
http://www.security-express.com/archives/bugtraq/2001-01/0424.html
BID-2293
FreeBSD-SA-01:08
L-029
ipfw-bypass-firewall(5998)

CPE    10
cpe:/o:freebsd:freebsd:4.1.1
cpe:/o:freebsd:freebsd:3.5.1
cpe:/o:freebsd:freebsd:3.0
cpe:/o:freebsd:freebsd:3.1
...

© SecPod Technologies