CVE-2001-0402: High severity Darren Reed IPFilter vulnerability
IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0402?
CVE-2001-0402 has a medium severity level due to its potential to allow unauthorized access through fragmented packets.
How do I fix CVE-2001-0402?
To fix CVE-2001-0402, you should upgrade IPFilter to version 3.4.17 or later, as this version addresses the vulnerability.
Which systems are affected by CVE-2001-0402?
CVE-2001-0402 affects IPFilter versions up to and including 3.4.16, as well as specific OpenBSD and FreeBSD versions.
What type of vulnerability is CVE-2001-0402?
CVE-2001-0402 is a security vulnerability that allows remote attackers to bypass access restrictions.
Can CVE-2001-0402 be exploited remotely?
Yes, CVE-2001-0402 can be exploited remotely by attackers who send specially crafted fragmented packets.