CVE-2000-0289: Medium severity Linux Linux kernel vulnerability
IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable IP masquerading on affected Linux 2.2.x systems until an official patch is available to prevent remote attackers from routing forged UDP packets through the internal interface.
IP masquerading (Linux 2.2.x) masquerading = disabled - Compensating control
Apply perimeter firewall/NAT rules to block or drop UDP packets with forged external source IP/port values and restrict NAT/masquerading to trusted hosts/interfaces only; isolate affected hosts from untrusted networks until the issue is remediated.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0289?
CVE-2000-0289 has a medium severity rating due to its potential to allow unauthorized access to internal networks.
How do I fix CVE-2000-0289?
To fix CVE-2000-0289, it is recommended to upgrade to a patched version of the Linux kernel or disable IP masquerading.
What systems are affected by CVE-2000-0289?
CVE-2000-0289 affects Linux kernel versions 2.2.x, including various distributions like Debian and Red Hat.
What is the impact of CVE-2000-0289?
The impact of CVE-2000-0289 allows remote attackers to route UDP packets through the internal interface, potentially leading to further exploits.
Can CVE-2000-0289 be exploited remotely?
Yes, CVE-2000-0289 can be exploited remotely by attackers who can manipulate the source IP address and port of UDP packets.