Дырка в iptables/nat в linux (protection bypass)

Некорректная обработка команд FTP и других протоколов позволяет открыть любой порт сервера и приводит к возможности атаки из демилитаризованной в приватную зону...

CVE-2001-0405

ipconntrackftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall...

Important: Red Hat Security Advisory: Kernel

A security hole has been found that does not affect the default configuration of Red Hat Linux, but it can affect some custom configurations of Red Hat Linux 7.1. The bug is specific to the Linux 2.4 kernel series. Aside from the fix, countless bugfixes have been applied to this kernel as a resul...

01-2001.txt

===== Tempest Security Technologies - Advisory 01 / 2001 ============== Security flaw in Linux 2.4 IPTables using FTP PORT -------------------------------------------------- Tempest Security Technologies, a business unit of CESAR - Centro de Estudos e Sistemas Avançados do Recife Author: Cristian...

Tempest Security Techonologies -- Adivsory #01/2001 -- Linux IPTables

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This advisory is also available at: http://www.tempest.com.br/advisories/01-2001.html Cristiano Lincoln Mattos, CISSP, SSCP CESAR - Centro de Estudos e Sistemas Avanзados do Recife ===== Tempest Security Technologies - Advisory 01 / 2001 =============...

Linux Kernel 2.4 - IPTables FTP Stateful Inspection Arbitrary Filter Rule Insertion

source: https://www.securityfocus.com/bid/2602/info The Linux kernel includes a built-in firewall implementation called IPTables. IPTables supports stateful inspection of several application protocols, one of which is FTP. The inspection is used to facilitate outgoing PORT connections for FTP dat...

Linux Kernel 2.4 - IPTables FTP Stateful Inspection Arbitrary Filter Rule Insertion

Linux Kernel 2.4 - IPTables FTP Stateful Inspection Arbitrary Filter Rule Insertion source: https://www.securityfocus.com/bid/2602/info The Linux kernel includes a built-in firewall implementation called IPTables. IPTables supports stateful inspection of several application protocols, one of whic...