CVE-2000-1167: High severity FreeBSD FreeBSD vulnerability

Published Jan 9, 2001

Updated

ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat denyincoming" command, which allows remote attackers to connect to the target system.

Affected Software

5 affected components

FreeBSD FreeBSD=4.1.1-stable

FreeBSD FreeBSD=3.5.1

FreeBSD FreeBSD=4.1

FreeBSD FreeBSD=4.0

FreeBSD FreeBSD=3.5

Remediation

Patch Available

http://www.securityfocus.com/bid/1974

Event History

Jan 9, 2001

CVE Published

05:00 AM

Jan 22, 2001

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1167?

CVE-2000-1167 has a high severity due to its potential to allow unauthorized remote access to the affected FreeBSD systems.

How do I fix CVE-2000-1167?

To fix CVE-2000-1167, update your FreeBSD system to a version later than 4.1.1 and ensure proper configuration of the ppp utility.

Which FreeBSD versions are affected by CVE-2000-1167?

CVE-2000-1167 affects FreeBSD versions 4.1.1 and earlier, including 4.0, 4.1, 3.5, and 3.5.1.

What kind of attack can exploit CVE-2000-1167?

Exploit of CVE-2000-1167 can allow remote attackers to connect to the system, potentially leading to unauthorized access.

Is CVE-2000-1167 still a relevant vulnerability today?

While CVE-2000-1167 is an older vulnerability, systems running the affected versions of FreeBSD may still be in use, warranting caution.