Remote Bypass of Access Restrictions in ipfw and ip6fw in FreeBSD 4.2 and Earlier

Remote Bypass of Access Restrictions in ipfw and ip6fw in FreeBSD 4.2 and Earlier

CVE-2001-0183 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection.

Learn more about our Web Application Penetration Testing UK.