PT-2002-1727 · Netfilter · Netfilter

Published 2002-07-26 · Updated 2024-02-03 · CVE-2002-0704

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netfilter ("iptables") versions 1.2.6a and earlier

Description The Network Address Translation (NAT) capability leaks translated IP addresses in ICMP error messages.

Recommendations For versions 1.2.6a and earlier, consider disabling the NAT capability until a patch is available. Restrict access to ICMP error messages to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-212

Related Identifiers

CVE-2002-0704

Affected Products

Netfilter

References · 8

• http://securityfocus.com/bid/4699 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2002-086.html · Vendor Advisory
• http://iss.net/security_center/static/9043.php · Vendor Advisory
• http://linux-mandrake.com/en/security/2002/MDKSA-2002-030.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0704 · Security Note
• http://online.securityfocus.com/advisories/4116 · Vendor Advisory
• https://t.me/cvenotify/69893 · Telegram Post
• http://marc.info/?l=bugtraq&m=102088521517722&w=2 · Note