PT-2001-1042 · Netfilter · Iptables

Published 2001-10-30 · Updated 2021-02-02 · CVE-2001-1388

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions iptables versions prior to 1.2.4

Description The issue affects the iptables package, potentially allowing attackers to generate more or less traffic than intended by the administrator due to inaccurate conversion of rate limits specified on the command line. Multiple vulnerabilities in the iptables package of Red Hat Linux can be exploited remotely, leading to a disruption in the availability of protected information.

Recommendations For versions prior to 1.2.4, update to version 1.2.4 or later to resolve the issue.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2015-07976

BDU:2015-07977

CVE-2001-1388

Affected Products

Iptables

References · 6

• 🔥 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=53325 · Exploit
• https://bdu.fstec.ru/vul/2015-07977 · Security Note
• http://rhn.redhat.com/errata/RHSA-2001-144.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07976 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2001-1388 · Security Note
• https://rhn.redhat.com/errata/RHSA-2001-144.html · Note