CVE-2001-0405

2001-09-1804:00:00

mitre

www.cve.org

6.9 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.5%

JSON

ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall.

References

archives.neohapsis.com/archives/bugtraq/2001-04/0271.html

www.linux-mandrake.com/en/security/2001/MDKSA-2001-071.php3

www.redhat.com/support/errata/RHSA-2001-052.html

www.redhat.com/support/errata/RHSA-2001-084.html

www.securityfocus.com/bid/2602

exchange.xforce.ibmcloud.com/vulnerabilities/6390