ipmasq Incorrect Packet Forwarding Default Ruleset Vulnerability
BID:8664
Info
ipmasq Incorrect Packet Forwarding Default Ruleset Vulnerability
| Bugtraq ID: | 8664 |
| Class: | Configuration Error |
| CVE: |
CVE-2003-0785 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 20 2003 12:00AM |
| Updated: | Jul 11 2009 11:56PM |
| Credit: | The disclosure of this issue has been credited to the vendor. |
| Vulnerable: |
Brian Bassett ipmasq 3.5.10 |
| Not Vulnerable: | |
Discussion
ipmasq Incorrect Packet Forwarding Default Ruleset Vulnerability
Debian has reported that the firewall rules configured by ipmasq may result in incorrect forwarding of traffic on the gateway host. According to the report, any traffic destined for internal hosts arriving at the external interface of the gateway will be forwarded to the destination host on the internal network regardless of whether the packet can be associated with an established connection or not. This behavior is incorrect and may result in attackers gaining unauthorized access to internal and potentially more vulnerable hosts.
Debian has reported that the firewall rules configured by ipmasq may result in incorrect forwarding of traffic on the gateway host. According to the report, any traffic destined for internal hosts arriving at the external interface of the gateway will be forwarded to the destination host on the internal network regardless of whether the packet can be associated with an established connection or not. This behavior is incorrect and may result in attackers gaining unauthorized access to internal and potentially more vulnerable hosts.
Exploit / POC
ipmasq Incorrect Packet Forwarding Default Ruleset Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
ipmasq Incorrect Packet Forwarding Default Ruleset Vulnerability
Solution:
Debian has issued fixes, listed in advisory DSA-389-1. See the reference section.
Brian Bassett ipmasq 3.5.10
Solution:
Debian has issued fixes, listed in advisory DSA-389-1. See the reference section.
Brian Bassett ipmasq 3.5.10
-
Debian ipmasq_3.5.10c_all.deb
http://security.debian.org/pool/updates/main/i/ipmasq/ipmasq_3.5.10c_a ll.deb
References
ipmasq Incorrect Packet Forwarding Default Ruleset Vulnerability
References:
References: