CVE-2005-2317
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.6%
Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies.
Affected configurations
References
seclists.org/lists/fulldisclosure/2005/Jul/0409.html
secunia.com/advisories/16087
secunia.com/advisories/17110
secunia.com/advisories/17113
shorewall.net/News.htm#20050717
www.debian.org/security/2005/dsa-849
www.gentoo.org/security/en/glsa/glsa-200507-20.xml
www.securityfocus.com/bid/14292
www.ubuntu.com/usn/usn-197-1
Related
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.6%