CVEvulnerability

CVE-2002-1978

7.5 HIGH Published 2002-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command from the server.

Affected configurations

• darren reed ipfilter 3.1.1 • darren reed ipfilter 3.1.2 • darren reed ipfilter 3.1.3 • darren reed ipfilter 3.1.4 • darren reed ipfilter 3.1.5 • darren reed ipfilter 3.1.6 • darren reed ipfilter 3.1.7 • darren reed ipfilter 3.1.8 • darren reed ipfilter 3.1.9 • darren reed ipfilter 3.1.10 • darren reed ipfilter 3.2.1 • darren reed ipfilter 3.2.2 • darren reed ipfilter 3.2.3 • darren reed ipfilter 3.2.4 • darren reed ipfilter 3.2.5 • darren reed ipfilter 3.2.6 • darren reed ipfilter 3.2.7 • darren reed ipfilter 3.2.8 • darren reed ipfilter 3.2.9 • darren reed ipfilter 3.2.10 • darren reed ipfilter 3.2.11 • darren reed ipfilter 3.2.12 • darren reed ipfilter 3.2.13 • darren reed ipfilter 3.2.14 • darren reed ipfilter 3.2.15 • darren reed ipfilter 3.2.16 • darren reed ipfilter 3.2.17 • darren reed ipfilter 3.2.18 • darren reed ipfilter 3.2.19 • darren reed ipfilter 3.2.20 • darren reed ipfilter 3.2.21 • darren reed ipfilter 3.2.22 • darren reed ipfilter 3.3.1 • darren reed ipfilter 3.3.2 • darren reed ipfilter 3.3.3 • darren reed ipfilter 3.3.4 • darren reed ipfilter 3.3.5 • darren reed ipfilter 3.3.6 • darren reed ipfilter 3.3.7 • darren reed ipfilter 3.3.8 • darren reed ipfilter 3.3.9 • darren reed ipfilter 3.3.10 • darren reed ipfilter 3.3.11 • darren reed ipfilter 3.3.12 • darren reed ipfilter 3.3.13 • darren reed ipfilter 3.3.14 • darren reed ipfilter 3.3.15 • darren reed ipfilter 3.3.16 • darren reed ipfilter 3.3.17 • darren reed ipfilter 3.3.18 • darren reed ipfilter 3.3.19 • darren reed ipfilter 3.3.20 • darren reed ipfilter 3.3.21 • darren reed ipfilter 3.3.22 • darren reed ipfilter 3.4.1 • darren reed ipfilter 3.4.2 • darren reed ipfilter 3.4.3 • darren reed ipfilter 3.4.4 • darren reed ipfilter 3.4.5 • darren reed ipfilter 3.4.6 … and 22 more

Related

Weakness · not in database (1)

Referenced by CWE · observed example (1)

  • CWE-436 Interpretation Conflict weakness

References