CVE-2001-0183

Опубликовано: 26 мар. 2001

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection.

Ссылки

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:08.ipfw.asc
Patch
Vendor Advisory
http://www.ciac.org/ciac/bulletins/l-029.shtml
http://www.osvdb.org/1743
http://www.security-express.com/archives/bugtraq/2001-01/0424.html
http://www.securityfocus.com/bid/2293
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5998
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:08.ipfw.asc
Patch
Vendor Advisory
http://www.ciac.org/ciac/bulletins/l-029.shtml
http://www.osvdb.org/1743
http://www.security-express.com/archives/bugtraq/2001-01/0424.html
http://www.securityfocus.com/bid/2293
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5998

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08911

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-6wc5-6x3h-cm5p

github

почти 4 года назад