PT-2005-1033 · Debian · Shorewall

Supernaut · Published 2005-07-19 · Updated 2008-09-05 · CVE-2005-2317

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Shorewall versions 2.4.x through 2.4.0 Shorewall versions 2.2.x through 2.2.4 Shorewall versions 2.0.x through 2.0.16

Description The issue allows remote attackers with an accepted MAC address to bypass other firewall rules or policies when MACLIST TTL is greater than 0 or MACLIST DISPOSITION is set to ACCEPT. Multiple vulnerabilities in the Shorewall package of the Debian GNU/Linux operating system can be exploited remotely, potentially leading to a breach of confidentiality, integrity, and availability of protected information.

Recommendations For Shorewall versions 2.4.x through 2.4.0, update to version 2.4.1 or later. For Shorewall versions 2.2.x through 2.2.4, update to version 2.2.5 or later. For Shorewall versions 2.0.x through 2.0.16, update to version 2.0.17 or later.

Fix

Related Identifiers

BDU:2015-03161

CVE-2005-2317

DSA-849-1

Affected Products

Shorewall

References · 16

• http://seclists.org/lists/fulldisclosure/2005/Jul/0409.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-2317 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200507-20.xml · Vendor Advisory
• http://shorewall.net/News.htm#20050717 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2317 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2317 · Security Note
• https://bdu.fstec.ru/vul/2015-03161 · Security Note
• http://ubuntu.com/usn/usn-197-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2317 · Security Note
• https://osv.dev/vulnerability/CVE-2005-2317 · Vendor Advisory
• http://debian.org/security/2005/dsa-849 · Vendor Advisory
• http://secunia.com/advisories/16087 · Vendor Advisory
• http://debian.org/security/dsa-849 · Note
• http://secunia.com/advisories/17113 · Note
• http://secunia.com/advisories/17110 · Note