NetSight
high7.5

CVE-2004-1799

PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attacke…

Impact

PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces.

Affected products

VendorProductAffected versions
OpenbsdOpenbsd
Versions 3.0, 3.1, 3.2, 3.3, 3.4

References