← Back

CVE-2001-0183

nvd nist
Published: Mar 26, 2001Modified: Apr 16, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection.

Affected (11)

Products: Freebsd: Freebsd
Freebsd
1 product
Freebsd
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Freebsd
Version 3.0
Freebsd
Version 3.1
Freebsd
Version 3.3
Freebsd
Version 3.4
Freebsd
Version 3.5.1
Freebsd
Version 3.5
Freebsd
Version 4.0
Freebsd
Version 4.0 alpha
Freebsd
Version 4.1.1
Freebsd
Version 4.1
Freebsd
Version 4.2

References (12)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:08.ipfw.asc (unsafe URL)
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:08.ipfw.asc (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.