Red Hat Linux IPTables Firewall Failure Vulnerability

Bugtraq ID:	8481
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Aug 25 2003 12:00AM
Updated:	Aug 25 2003 12:00AM
Credit:	This vulnerability has been disclosed in a vendor-released security advisory.
Vulnerable:	Sun Linux 5.0.7 RedHat iptables-ipv6-1.2.6a-2.i386.rpm + RedHat Linux 8.0 i386 RedHat iptables-ipv6-1.2.5-3.i386.rpm + RedHat Linux 7.3 i386 RedHat iptables-ipv6-1.2.3-1.i386.rpm + RedHat Linux 7.2 RedHat iptables-ipv6-1.2.1a-1.i386.rpm + RedHat Linux 7.1 RedHat iptables-1.2.6a-2.i386.rpm + RedHat Linux 8.0 i386 RedHat iptables-1.2.5-3.i386.rpm + RedHat Linux 7.3 i386 RedHat iptables-1.2.3-1.i386.rpm + RedHat Linux 7.2 RedHat iptables-1.2.3-1.i386.rpm + RedHat Linux 7.1
Not Vulnerable:

Red Hat Linux IPTables Firewall Failure Vulnerability

iptables on Red Hat Linux systems has been reported prone to a vulnerability, which may prevent the iptables firewall from functioning correctly.

The issue presents itself due to recent Red Hat kernel updates. It has been reported that a recent kernel update failed to update the iptables utility thereby preventing iptables operations, for example owner match, from functioning.

Red Hat Linux IPTables Firewall Failure Vulnerability

There is no exploit code required.

Red Hat Linux IPTables Firewall Failure Vulnerability

Solution:
Sun have released fixes to address this vulnerability in Sun Linux 5.0.7. Users who are affected by this issue are advised to apply relevant fixes as soon as possible. Please see Sun reference (Sun Linux Support - Sun Linux Patches (Sun)) for further details regarding obtaining and applying appropriate fixes.

Red Hat Linux has released an advisory (RHSA-2003:213-01) to address this issue. See the referenced advisory for further details regarding applying fixes.


Redhat iptables-1.2.5-3.i386.rpm

• Red Hat iptables-1.2.8-8.72.3.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/iptables-1.2.8-8.72.3.i386.rpm

Redhat iptables-ipv6-1.2.5-3.i386.rpm

• Red Hat iptables-ipv6-1.2.8-8.72.3.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/iptables-ipv6-1.2.8-8.72.3.i38 6.rpm

Redhat iptables-ipv6-1.2.3-1.i386.rpm

• Red Hat iptables-ipv6-1.2.8-8.72.3.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/iptables-ipv6-1.2.8-8.72.3.i38 6.rpm

Redhat iptables-1.2.6a-2.i386.rpm

• Red Hat iptables-1.2.8-8.80.2.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/iptables-1.2.8-8.80.2.i386.rpm

Redhat iptables-ipv6-1.2.1a-1.i386.rpm

• Red Hat iptables-ipv6-1.2.8-8.72.3.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/iptables-ipv6-1.2.8-8.72.3.i38 6.rpm

Redhat iptables-1.2.3-1.i386.rpm

• Red Hat iptables-1.2.8-8.72.3.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/iptables-1.2.8-8.72.3.i386.rpm

Redhat iptables-ipv6-1.2.6a-2.i386.rpm

• Red Hat iptables-ipv6-1.2.8-8.80.2.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/iptables-ipv6-1.2.8-8.80.2.i38 6.rpm

Sun Linux 5.0.7

• Sun iptables-1.2.8-8.72.3.i386.rpm
  ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPM S/iptables-1.2.8-8.72.3.i386.rpm


• Sun iptables-ipv6-1.2.8-8.72.3.i386.rpm
  ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPM S/iptables-ipv6-1.2.8-8.72.3.i386.rpm

Red Hat Linux IPTables Firewall Failure Vulnerability

References:

• Sun Linux Support - Sun Linux Patches (Sun)