[SECURITY] [DSA 849-1] New shorewall packages fix firewall bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 849-1 [email protected] http://www.debian.org/security/ Martin Schulze October 8th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2317

Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLISTTTL is greater than 0 or MACLISTDISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies...