Lucene search
HistoryMay 07, 2001 - 4:00 a.m.
CVE-2001-0183
cve-2001-0183
freebsd 4.2
ipfw
ip6fw
ece flag
tcp packet
access restriction
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.027 Low
EPSS
Percentile
90.4%
ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection.
Affected configurations
Node
freebsdfreebsdMatch3.0
ORfreebsdfreebsdMatch3.1
ORfreebsdfreebsdMatch3.3
ORfreebsdfreebsdMatch3.4
ORfreebsdfreebsdMatch3.5
ORfreebsdfreebsdMatch3.5.1
ORfreebsdfreebsdMatch4.0
ORfreebsdfreebsdMatch4.0alpha
ORfreebsdfreebsdMatch4.1
ORfreebsdfreebsdMatch4.1.1
ORfreebsdfreebsdMatch4.2
Related
openvas
openvas
Firewall ECE-bit bypass
2005-11-03 00:00:00
Firewall ECE-bit Bypass
2005-11-03 00:00:00
cvelist
cvelist
CVE-2001-0183
2001-05-07 04:00:00
nvd
nvd
CVE-2001-0183
2001-03-26 05:00:00
nessus
nessus
Multiple BSD ipfw / ip6fw ECE Bit Filtering Evasion
2004-03-30 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.027 Low
EPSS
Percentile
90.4%
Related for CVE-2001-0183