Inconsistent Response Generation Vulnerability in iptables

CVE-2001-1387 · LOW Severity

AV:L/AC:L/AU:N/C:P/I:N/A:N

iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak.

Learn more about our Web Application Penetration Testing UK.