Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

CVE-2001-1387

Published

21 years ago

Last Modified

2 years ago

CVSSv2.0 Severity

Low

Impact Analysis

Share on Facebook
Share on LinkedIn
Share on Twitter

iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak..

CVSSv2.0 Score

Severity: Low
Base Score: 2.1/10
Exploit Score: 3.9/10
Access Vector: Local
Access Complexity: Low
Authentication Required: None
Impact Score: 2.9/10
Confidentiality Impact: Partial
Availability Impact: None
Integrity Impact: None

Products Affected

CPE	Affected	Vulnerable	Excluding	Edit
cpe:2.3:a:netfilter:iptables::::::::	Yes	-	1.2.4

References

http://rhn.redhat.com/errata/RHSA-2001-144.html
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=50500