Arno's IPTABLES Firewall IPv6 Detection Remote Security Bypass Vulnerability

Bugtraq ID:	42909
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 01 2010 12:00AM
Updated:	Sep 01 2010 12:00AM
Credit:	Tim Small
Vulnerable:
Not Vulnerable:

Arno's IPTABLES Firewall IPv6 Detection Remote Security Bypass Vulnerability

Arno's IPTABLES Firewall is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass firewall rules. This may lead to other attacks.

Versions prior to IPTABLES firewall 1.9.2l are vulnerable.

Arno's IPTABLES Firewall IPv6 Detection Remote Security Bypass Vulnerability

Attackers can use readily available utilities to exploit this issue.

Arno's IPTABLES Firewall IPv6 Detection Remote Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for details.

Arno's IPTABLES Firewall IPv6 Detection Remote Security Bypass Vulnerability

References:

• [Firewall] Firewall version 1.9.2l (stable) available for download - IMPORTANT S (Arno van Amersfoort)
  
• arno-iptables-firewall leaves Debian hosts open on ipv6 without warning the user (Tim Small)