FreeBSD Security Advisory FreeBSD-SA-05:13.ipfw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:13.ipfw Security Advisory The FreeBSD Project Topic: ipfw packet matching errors with address tables Category: core Module: netinet Announced: 2005-06-29...

FreeBSD-SA-05:13.ipfw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:13.ipfw Security Advisory The FreeBSD Project Topic: ipfw packet matching errors with address tables Category: core Module: netinet Announced: 2005-06-29...

kernel -- ipfw packet matching errors with address tables

Problem Description The ipfw tables lookup code caches the result of the last query. The kernel may process multiple packets concurrently, performing several concurrent table lookups. Due to an insufficient locking, a cached result can become corrupted that could cause some addresses to be...

[EXPL] IPFW ECE Firewall Bypassing Exploit

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Old FreeBSD versions ECCEflag ipfw protection bypass

ACK packets with ECE flags bypass filtering...

CVE-2001-0969

ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts...

CVE-1999-1339

CVE-1999-1339 affects Linux 2.2.10 and earlier (with ipchains) and FreeBSD 3.2 (with ipfw). The issue is triggered by a crafted ping -R (record route) packet, causing a remote attacker to induce a kernel panic and denial of service. The vulnerability arises from how NAT is handled when enabled, a...

CVE-2001-0969

CVE-2001-0969 affects FreeBSD’s ipfw firewall. The vulnerability arises from improper handling of the string "me" in rules when point-to-point interfaces are used, allowing connections from arbitrary remote hosts. The issue impacts the firewall decision logic, potentially bypassing intended restr...

CVE-2001-0969: Undefined Security Weakness

ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts...

CVE-1999-1339: Undefined Security Weakness

Vulnerability when Network Address Translation NAT is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service kernel panic via a ping -R record route command...

CVE-2001-0969

ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts...

Некорректная обработка "me" в ipfw в FreeBSD (protection bypass)

При использовании адреса одного из концов ppp-интерфейса пакет может обойти правило в котором используется 'me'...

Security Advisory FreeBSD-SA-01:53.ipfw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:53 Security Advisory FreeBSD, Inc. Topic: ipfw me' on P2P interfaces matches remote address Category: core Module: ipfw Announced: 2001-08-17 Credits: Igor M Podlesny...

FreeBSD-SA-01:53.ipfw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:53 Security Advisory FreeBSD, Inc. Topic: ipfw me' on P2P interfaces matches remote address Category: core Module: ipfw Announced: 2001-08-17 Credits: Igor M Podlesny...

CVE-2001-0183

The CVE-2001-0183 issue affects ipfw/ip6fw on FreeBSD 4.2 and earlier, where a remote attacker can bypass access restrictions by setting the ECE bit in a TCP packet so it appears part of an established connection. OpenVAS/Nessus entries corroborate the firewall ECE-bit bypass behavior on FreeBSD ...

CVE-2001-0183: Undefined Security Weakness

ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection...

Security Advisory: FreeBSD-SA-01:08.ipfw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:08 Security Advisory FreeBSD, Inc. Topic: ipfw/ip6fw allows bypassing of 'established' keyword Category: core Module: kernel Announced: 2001-01-23 Credits: Aragon Gouveia...

Дырка в ipfw

Правило established не срабатывает на пакетах, где вместе с SYN установлен флаг ECE...

FreeBSD-SA-01:08.ipfw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:08 Security Advisory FreeBSD, Inc. Topic: ipfw/ip6fw allows bypassing of 'established' keyword Category: core Module: kernel Announced: 2001-01-23 Credits: Aragon Gouveia...

Ip packet filtering with bridging on freebsd

If someone is doing packet filtering using ipfw to do packet filtering with a FreeBSD box configured to do bridging, it is relatively easy to make the box go "boom" as none of the standard header sanity checks are done prior to the filter routine being called check /sys/net/bridge.c It is a featu...