CVE-2005-2317

Опубликовано: 19 июл. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies.

Ссылки

http://seclists.org/lists/fulldisclosure/2005/Jul/0409.html
Patch
Vendor Advisory
http://secunia.com/advisories/16087
Patch
Vendor Advisory
http://secunia.com/advisories/17110
http://secunia.com/advisories/17113
http://shorewall.net/News.htm#20050717
Patch
Vendor Advisory
http://www.debian.org/security/2005/dsa-849
http://www.gentoo.org/security/en/glsa/glsa-200507-20.xml
http://www.securityfocus.com/bid/14292
http://www.ubuntu.com/usn/usn-197-1
http://seclists.org/lists/fulldisclosure/2005/Jul/0409.html
Patch
Vendor Advisory
http://secunia.com/advisories/16087
Patch
Vendor Advisory
http://secunia.com/advisories/17110
http://secunia.com/advisories/17113
http://shorewall.net/News.htm#20050717
Patch
Vendor Advisory
http://www.debian.org/security/2005/dsa-849
http://www.gentoo.org/security/en/glsa/glsa-200507-20.xml
http://www.securityfocus.com/bid/14292
http://www.ubuntu.com/usn/usn-197-1

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:shorewall:shorewall:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.0a:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.0b:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.2a:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.2b:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.2c:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.2d:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.2e:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.2f:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.3a:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.3b:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.3c:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.10:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.11:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.12:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.13:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.14:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.15:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.0.16:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.2.4:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.4.0:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.4.0_rc1:*:*:*:*:*:*:*

cpe:2.3:a:shorewall:shorewall:2.4.0_rc2:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00993

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-2317

ubuntu

около 20 лет назад

CVE-2005-2317

debian

около 20 лет назад

Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0 ...

GHSA-jq9c-9fj7-fg5g

github

больше 3 лет назад

BDU:2015-03161

fstec

около 20 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 76%

0.00993

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other