PT-2002-1727 · Netfilter · Netfilter

Publicado 2002-07-26 · Atualizado 2024-02-03 · CVE-2002-0704

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netfilter ("iptables") versions 1.2.6a and earlier

Description The Network Address Translation (NAT) capability leaks translated IP addresses in ICMP error messages.

Recommendations For versions 1.2.6a and earlier, consider disabling the NAT capability until a patch is available. Restrict access to ICMP error messages to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-212

Identificadores relacionados

CVE-2002-0704

Produtos afetados

Netfilter

Referências · 8

• https://t.me/cvenotify/69893 · Publicação no Telegram
• http://securityfocus.com/bid/4699 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=102088521517722&w=2 · Nota
• http://redhat.com/support/errata/RHSA-2002-086.html · Aviso do Fabricante
• http://iss.net/security_center/static/9043.php · Aviso do Fabricante
• http://linux-mandrake.com/en/security/2002/MDKSA-2002-030.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0704 · Nota de Segurança
• http://online.securityfocus.com/advisories/4116 · Aviso do Fabricante