high7.5Public exploit code
CVE-2001-0402
IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sendin…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IPFilter 3.x - Fragment Rule Bypass2001-04-09 · remote · unix · Verified
Impact
IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Darren Reed | Ipfilter | through 3.4.16 |
| Freebsd | Freebsd | through 4.1 |
| Openbsd | Openbsd | Version 2.8 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/freebsd/2001-04/0338.html
- http://marc.info/?l=bugtraq&m=98679734015538&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6331
- http://archives.neohapsis.com/archives/freebsd/2001-04/0338.html
- http://marc.info/?l=bugtraq&m=98679734015538&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6331