CVE-2001-0183

The CVE-2001-0183 issue affects ipfw/ip6fw on FreeBSD 4.2 and earlier, where a remote attacker can bypass access restrictions by setting the ECE bit in a TCP packet so it appears part of an established connection. OpenVAS/Nessus entries corroborate the firewall ECE-bit bypass behavior on FreeBSD ...

CVE-2001-0183: Undefined Security Weakness

ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection...

Security Advisory: FreeBSD-SA-01:08.ipfw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:08 Security Advisory FreeBSD, Inc. Topic: ipfw/ip6fw allows bypassing of 'established' keyword Category: core Module: kernel Announced: 2001-01-23 Credits: Aragon Gouveia...

FreeBSD-SA-01:08.ipfw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:08 Security Advisory FreeBSD, Inc. Topic: ipfw/ip6fw allows bypassing of 'established' keyword Category: core Module: kernel Announced: 2001-01-23 Credits: Aragon Gouveia...