PT-2005-1033 · Debian · Shorewall

Supernaut · Publicado 2005-07-19 · Atualizado 2008-09-05 · CVE-2005-2317

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Shorewall versions 2.4.x through 2.4.0 Shorewall versions 2.2.x through 2.2.4 Shorewall versions 2.0.x through 2.0.16

Description The issue allows remote attackers with an accepted MAC address to bypass other firewall rules or policies when MACLIST TTL is greater than 0 or MACLIST DISPOSITION is set to ACCEPT. Multiple vulnerabilities in the Shorewall package of the Debian GNU/Linux operating system can be exploited remotely, potentially leading to a breach of confidentiality, integrity, and availability of protected information.

Recommendations For Shorewall versions 2.4.x through 2.4.0, update to version 2.4.1 or later. For Shorewall versions 2.2.x through 2.2.4, update to version 2.2.5 or later. For Shorewall versions 2.0.x through 2.0.16, update to version 2.0.17 or later.

Correção

Identificadores relacionados

BDU:2015-03161

CVE-2005-2317

DSA-849-1

Produtos afetados

Shorewall

Referências · 16

• http://debian.org/security/dsa-849 · Nota
• http://seclists.org/lists/fulldisclosure/2005/Jul/0409.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-2317 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200507-20.xml · Aviso do Fabricante
• http://shorewall.net/News.htm#20050717 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2317 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2317 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03161 · Nota de Segurança
• http://ubuntu.com/usn/usn-197-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-2317 · Nota de Segurança
• http://secunia.com/advisories/17113 · Nota
• https://osv.dev/vulnerability/CVE-2005-2317 · Aviso do Fabricante
• http://debian.org/security/2005/dsa-849 · Aviso do Fabricante
• http://secunia.com/advisories/17110 · Nota
• http://securityfocus.com/bid/14292 · Nota