Description
ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.redhat.com/support/errata/RHSA-2001-084.html ↗
- http://archives.neohapsis.com/archives/bugtraq/2001-04/0271.html ↗
- http://www.redhat.com/support/errata/RHSA-2001-052.html ↗
- http://www.securityfocus.com/bid/2602 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6390 ↗
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-071.php3 ↗