PT-2003-1058 · Red Hat+1 · Red Hat+1

Published 2003-03-17 · Updated 2017-07-11 · CVE-2003-0080

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Gnome-lokkit version 0.50 Red Hat Linux version 8.0

Description The issue is related to the iptables ruleset in Gnome-lokkit, which does not include any rules in the FORWARD chain. This could allow attackers to bypass intended access restrictions if packet forwarding is enabled. The vulnerability may lead to a breach of confidentiality, integrity, and availability of protected information. It can be exploited remotely.

Recommendations For Gnome-lokkit version 0.50, consider adding rules to the FORWARD chain to restrict packet forwarding. For Red Hat Linux version 8.0, review and update the iptables configuration to include necessary rules for the FORWARD chain. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-07877

BDU:2015-07892

CVE-2003-0080

Affected Products

Gnome Lokkit

Red Hat

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2003-0080 · Security Note
• https://bdu.fstec.ru/vul/2015-07892 · Security Note
• http://securityfocus.com/bid/7128 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-072.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07877 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11552 · Note
• http://osvdb.org/4400 · Note
• https://rhn.redhat.com/errata/RHSA-2003-072.html · Note