CVE-2001-0969

Published: Aug 31, 2001Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts.

Affected (1)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 4.3

References (8)

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:53.ipfw.asc (unsafe URL)

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/1937

Source: cve@mitre.org

http://www.securityfocus.com/bid/3206

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/7002

Source: cve@mitre.org

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:53.ipfw.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.osvdb.org/1937

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3206

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/7002

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.