7.5

CVE-2002-0060

IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Updatepre9 Version <= 2.4.18
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.89% 0.91
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:041
http://marc.info/?l=bugtraq&m=101483396412051&w=2
http://marc.info/?l=vuln-dev&m=101486352429653&w=2
http://www.kb.cert.org/vuls/id/230307
US Government Resource
http://www.netfilter.org/security/2002-02-25-irc-dcc-mask.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2002-028.html
http://www.securityfocus.com/bid/4188
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0203-027
https://exchange.xforce.ibmcloud.com/vulnerabilities/8302