PT-2003-1642 · Linux · Linux

Published 2003-08-05 · Updated 2016-10-18 · CVE-2003-0467

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Linux kernels versions 2.4.20 through some 2.5.x

Description: A issue in the ip nat sack adjust function of Netfilter in Linux kernels allows remote attackers to cause a denial of service, potentially due to an integer signedness error, in systems using NAT when certain configurations or modules are enabled.

Recommendations: For Linux kernels versions 2.4.20 through some 2.5.x, consider disabling the ip nat ftp or ip nat irc modules, or disabling CONFIG IP NF NAT FTP and CONFIG IP NF NAT IRC configurations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2003-0467

Affected Products

Linux

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2003-0467 · Security Note
• http://marc.info/?l=bugtraq&m=105985703724758&w=2 · Note