CVE-2001-1155

CRITICAL

FreeBSD 4.1.1-4.3 - Unauthenticated Access Control Bypass via DNS Spoofing

Title source: llm
STIX 2.1

Description

TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing.

References (2)

Core 2
Core References
Broken Link vdb-entry x_refsource_osvdb
http://www.osvdb.org/5454
Broken Link, Patch, Vendor Advisory vendor-advisory x_refsource_freebsd
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:56.tcp_wrappers.asc

Scores

CVSS v3 9.8
EPSS 0.0020
EPSS Percentile 41.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-863
Status published
Products (1)
freebsd/freebsd 4.1.1 - 4.3
Published Aug 23, 2001
Tracked Since Feb 18, 2026