PT-2001-1049 · Linux+1 · Linux Kernel+1

Publicado

2001-12-06

·

Atualizado

2017-10-10

·

CVE-2001-0851

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.0, 2.2, and 2.4 with syncookies enabled Red Hat Linux kernel versions 2.2.19
Description The issue allows remote attackers to bypass firewall rules by brute force guessing the cookie, potentially leading to disruption of confidentiality, integrity, and availability of protected information. The exploitation of these vulnerabilities can be carried out remotely.
Recommendations For Linux kernel versions 2.0, 2.2, and 2.4 with syncookies enabled, consider disabling syncookies as a temporary workaround until a patch is available. For Red Hat Linux kernel version 2.2.19, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-08107
BDU:2015-08111
BDU:2015-08115
BDU:2015-08118
BDU:2015-08120
BDU:2015-08122
BDU:2015-08123
BDU:2015-08124
BDU:2015-08125
BDU:2015-08128
BDU:2015-08131
CVE-2001-0851

Produtos afetados

Linux Kernel
Red Hat Linux Kernel