Arno's IPTables Firewall Script Restart Security Bypass Vulnerability

Bugtraq ID:	33981
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Mar 04 2009 12:00AM
Updated:	Jan 05 2011 09:22PM
Credit:	Lonnie Abelbeck
Vulnerable:	Arno van Amersfoort Arno's IPTables Firewall Script 1.9 -rc4
Not Vulnerable:	Arno van Amersfoort Arno's IPTables Firewall Script 1.9.0b

Arno's IPTables Firewall Script Restart Security Bypass Vulnerability

Arno's IPTables Firewall Script is prone to a security-bypass vulnerability because it fails to properly restrict network traffic following a restart of the application.

An attacker can exploit this issue to bypass intended security restrictions and send network packets to an affected computer.

Versions prior to Arno's IPTables Firewall Script 1.9.0b are vulnerable.

Arno's IPTables Firewall Script Restart Security Bypass Vulnerability

Attackers may use readily available network tools to exploit this issue.

Arno's IPTables Firewall Script Restart Security Bypass Vulnerability

Solution:
The vendor has addressed this issue in version 1.9.0b. Please see the references for more information.


Arno van Amersfoort Arno's IPTables Firewall Script 1.9 -rc4

• Arno van Amersfoort arno-iptables-firewall_1.9.0b.tar.gz
  http://rocky.eld.leidenuniv.nl/iptables-firewall/arno-iptables-firewal l_1.9.0b.tar.gz

Arno's IPTables Firewall Script Restart Security Bypass Vulnerability

References:

• [Firewall] Firewall restart allows blocked traffic (Lonnie Abelbeck)
  
• Vendor Homepage (Arno van Amersfoort)
  
• Version 1.9.0b (February 27, 2009) (Arno van Amersfoort)