Unscored severity · published Jun 18, 2001
CVE-2001-0402
IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets…
–
CVSS
2.4%
EPSS
No
On KEV
Description
IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freebsd · Freebsd
through 4.1 · source: NVD
IP
Ipfilter · Darren Reed
through 3.4.16 · source: NVD
OP
Openbsd · Openbsd
2.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0402
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0402
Patch
http://archives.neohapsis.com/archives/freebsd/2001-04/0338.html
marc.info
http://marc.info/?l=bugtraq&m=98679734015538&w=2
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/6331
More from Ipfilter
–
CVE-2009-1476
Buffer overflow in lib/load_http.c in ippool in Darren Reed IPFilter (aka IP Filter) 4.1.31 allows local users to gain privileges via vectors involving a long hostname in a URL
–
CVE-2002-1978
IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which…
–
CVE-2000-0553
Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" rules, allows remote attackers to bypass access restrictions
–
CVE-1999-1244
IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file