PT-2001-1041 · Netfilter · Iptables

Name of the Vulnerable Software and Affected Versions: iptables versions prior to 1.2.4 iptables-1.2.4 iptables-ipv6-1.2.4 Description: The issue affects the iptables package, potentially leading to an information leak due to iptables generating different responses than specified by the...

Bug in Linux 2.4 / iptables MAC match module

-- | | || |/ / -- -- | /o| /o| | | |/o| | -- -- ||||/|| / ||/ -- -- netservers security advisory 01-09-26 -- SUBJECT : Bug in Linux 2.4 / iptables MAC match module SUMMARY : MAC match module does not match small packets EFFECTS : Malicious users may bypass MAC-based DROP rules pcAnywhere does not...

Проблемы с MAC-фильтрацией в iptables (protection bypass)

Не проверяются правила для мелких пакетов...

CVE-2001-0405

ipconntrackftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall...

Дырка в iptables/nat в linux (protection bypass)

Некорректная обработка команд FTP и других протоколов позволяет открыть любой порт сервера и приводит к возможности атаки из демилитаризованной в приватную зону...

CVE-2001-0405

ipconntrackftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall...

Important: Red Hat Security Advisory: Kernel

A security hole has been found that does not affect the default configuration of Red Hat Linux, but it can affect some custom configurations of Red Hat Linux 7.1. The bug is specific to the Linux 2.4 kernel series. Aside from the fix, countless bugfixes have been applied to this kernel as a resul...

01-2001.txt

===== Tempest Security Technologies - Advisory 01 / 2001 ============== Security flaw in Linux 2.4 IPTables using FTP PORT -------------------------------------------------- Tempest Security Technologies, a business unit of CESAR - Centro de Estudos e Sistemas Avançados do Recife Author: Cristian...

Tempest Security Techonologies -- Adivsory #01/2001 -- Linux IPTables

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This advisory is also available at: http://www.tempest.com.br/advisories/01-2001.html Cristiano Lincoln Mattos, CISSP, SSCP CESAR - Centro de Estudos e Sistemas Avanзados do Recife ===== Tempest Security Technologies - Advisory 01 / 2001 =============...

Linux Kernel 2.4 - IPTables FTP Stateful Inspection Arbitrary Filter Rule Insertion

source: https://www.securityfocus.com/bid/2602/info The Linux kernel includes a built-in firewall implementation called IPTables. IPTables supports stateful inspection of several application protocols, one of which is FTP. The inspection is used to facilitate outgoing PORT connections for FTP dat...

Linux Kernel 2.4 - IPTables FTP Stateful Inspection Arbitrary Filter Rule Insertion

Linux Kernel 2.4 - IPTables FTP Stateful Inspection Arbitrary Filter Rule Insertion source: https://www.securityfocus.com/bid/2602/info The Linux kernel includes a built-in firewall implementation called IPTables. IPTables supports stateful inspection of several application protocols, one of whic...