CVEvulnerability
CVE-2001-0969
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-08-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts.
Affected configurations
• freebsd freebsd 4.3
References
- ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:53.ipfw.asc Patch, Vendor Advisory
- http://www.osvdb.org/1937 www.osvdb.org
- http://www.securityfocus.com/bid/3206 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7002 exchange.xforce.ibmcloud.com
- ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:53.ipfw.asc Patch, Vendor Advisory
- http://www.osvdb.org/1937 www.osvdb.org
- http://www.securityfocus.com/bid/3206 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7002 exchange.xforce.ibmcloud.com