Executive Summary
| Summary | |
|---|---|
| Title | New shorewall packages fix firewall bypass |
| Informations | |||
|---|---|---|---|
| Name | DSA-849 | First vendor Publication | 2005-10-08 |
| Vendor | Debian | Last vendor Modification | 2005-10-08 |
| Severity (Vendor) | N/A | Revision | 1 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| "Supernaut" noticed that shorewall, the Shoreline Firewall, could generate an iptables configuration which is significantly more permissive than the rule set given in the shorewall configuration, if MAC verification are used in a non-default manner. When MACLIST_DISPOSITION is set to ACCEPT in the shorewall.conf file, all packets from hosts which fail the MAC verification pass through the firewall, without further checks. When MACLIST_TTL is set to a non-zero value, packets from hosts which pass the MAC verification pass through the firewall, again without further checks. The old stable distribution (woody) is not affected by this problem. For the stable distribution (sarge) this problem has been fixed in version 2.2.3-2. For the unstable distribution (sid) this problem has been fixed in version 2.4.1-2. We recommend that you upgrade your shorewall package. |
Original Source
| Url : http://www.debian.org/security/2005/dsa-849 |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200507-20 (shorewall) File : nvt/glsa_200507_20.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 849-1 (shorewall) File : nvt/deb_849_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 18005 | Shorewall MACLIST_TTL Authenticated User Ruleset Bypass |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2006-01-15 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-197-1.nasl - Type : ACT_GATHER_INFO |
| 2005-10-11 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-849.nasl - Type : ACT_GATHER_INFO |
| 2005-07-22 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200507-20.nasl - Type : ACT_GATHER_INFO |
| 2005-07-21 | Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2005-123.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:34:29 |
|
