PT-2003-1058 · Red Hat+1 · Red Hat+1

Publicado 2003-03-17 · Atualizado 2017-07-11 · CVE-2003-0080

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Gnome-lokkit version 0.50 Red Hat Linux version 8.0

Description The issue is related to the iptables ruleset in Gnome-lokkit, which does not include any rules in the FORWARD chain. This could allow attackers to bypass intended access restrictions if packet forwarding is enabled. The vulnerability may lead to a breach of confidentiality, integrity, and availability of protected information. It can be exploited remotely.

Recommendations For Gnome-lokkit version 0.50, consider adding rules to the FORWARD chain to restrict packet forwarding. For Red Hat Linux version 8.0, review and update the iptables configuration to include necessary rules for the FORWARD chain. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

BDU:2015-07877

BDU:2015-07892

CVE-2003-0080

Produtos afetados

Gnome Lokkit

Red Hat

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2003-0080 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11552 · Nota
• http://osvdb.org/4400 · Nota
• https://bdu.fstec.ru/vul/2015-07892 · Nota de Segurança
• https://rhn.redhat.com/errata/RHSA-2003-072.html · Nota
• http://securityfocus.com/bid/7128 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2003-072.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-07877 · Nota de Segurança