CVE-2001-1155: Critical severity FreeBSD FreeBSD vulnerability

Q: What is the severity of CVE-2001-1155?

CVE-2001-1155 has a medium severity rating due to the potential for unauthorized access caused by DNS spoofing.

Q: How do I fix CVE-2001-1155?

To fix CVE-2001-1155, consider disabling the PARANOID ACL option or upgrading to a non-vulnerable version of FreeBSD.

Q: Which versions of FreeBSD are affected by CVE-2001-1155?

FreeBSD versions 4.1.1 through 4.3 are affected by CVE-2001-1155.

Q: What is the risk of exploiting CVE-2001-1155?

Exploiting CVE-2001-1155 allows remote attackers to bypass access restrictions, potentially leading to unauthorized actions on the system.

Q: Is CVE-2001-1155 a type of denial-of-service vulnerability?

No, CVE-2001-1155 is not a denial-of-service vulnerability; it primarily involves unauthorized access via DNS spoofing.

Published Aug 23, 2001

Updated

TCP Wrappers (tcpwrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing.

Affected Software

4 affected components

FreeBSD FreeBSD>=4.1.1<=4.3

FreeBSD FreeBSD=4.2

FreeBSD FreeBSD=4.1.1

FreeBSD FreeBSD=4.3

Remediation

Patch Available

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:56.tcp_wrappers.asc

Event History

Aug 23, 2001

CVE Published

via NVD·04:00 AM

Jun 25, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1155?

CVE-2001-1155 has a medium severity rating due to the potential for unauthorized access caused by DNS spoofing.

How do I fix CVE-2001-1155?