Vulnerability Details CVE-2001-0183
ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.089
EPSS Ranking 92.2%
CVSS Severity
CVSS v2 Score 7.5
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:08.ipfw.asc
- http://www.ciac.org/ciac/bulletins/l-029.shtml
- http://www.osvdb.org/1743
- http://www.security-express.com/archives/bugtraq/2001-01/0424.html
- http://www.securityfocus.com/bid/2293
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5998
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:08.ipfw.asc
- http://www.ciac.org/ciac/bulletins/l-029.shtml
- http://www.osvdb.org/1743
- http://www.security-express.com/archives/bugtraq/2001-01/0424.html
- http://www.securityfocus.com/bid/2293
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5998
Products affected by CVE-2001-0183
-
cpe:2.3:o:freebsd:freebsd:3.0
-
cpe:2.3:o:freebsd:freebsd:3.1
-
cpe:2.3:o:freebsd:freebsd:3.3
-
cpe:2.3:o:freebsd:freebsd:3.4
-
cpe:2.3:o:freebsd:freebsd:3.5
-
cpe:2.3:o:freebsd:freebsd:3.5.1
-
cpe:2.3:o:freebsd:freebsd:4.0
-
cpe:2.3:o:freebsd:freebsd:4.1
-
cpe:2.3:o:freebsd:freebsd:4.1.1
-
cpe:2.3:o:freebsd:freebsd:4.2