PT-2003-1642 · Linux · Linux

Publicado 2003-08-05 · Atualizado 2016-10-18 · CVE-2003-0467

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Linux kernels versions 2.4.20 through some 2.5.x

Description: A issue in the ip nat sack adjust function of Netfilter in Linux kernels allows remote attackers to cause a denial of service, potentially due to an integer signedness error, in systems using NAT when certain configurations or modules are enabled.

Recommendations: For Linux kernels versions 2.4.20 through some 2.5.x, consider disabling the ip nat ftp or ip nat irc modules, or disabling CONFIG IP NF NAT FTP and CONFIG IP NF NAT IRC configurations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2003-0467

Produtos afetados

Linux

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2003-0467 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=105985703724758&w=2 · Nota