CVE-2004-1799: High severity OpenBSD OpenBSD vulnerability
PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1799?
CVE-2004-1799 is considered a moderate to high severity vulnerability due to its potential for allowing unauthorized access through spoofed packets.
How do I fix CVE-2004-1799?
To mitigate CVE-2004-1799, you should upgrade to a non-vulnerable version of OpenBSD or configure packet filtering settings to restrict access solely to the intended interface.
What versions of OpenBSD are affected by CVE-2004-1799?
CVE-2004-1799 affects OpenBSD versions 3.0 through 3.4.
What type of attack can exploit CVE-2004-1799?
CVE-2004-1799 can be exploited through packet spoofing, where an attacker sends packets from unauthorized interfaces to bypass firewall restrictions.
Is CVE-2004-1799 related to firewall settings?
Yes, CVE-2004-1799 is directly related to stateful firewall settings in OpenBSD that do not enforce interface limitations for session packets.