Description
IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions.
References (9)
Core 9
Core References
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/230307
Patch, Vendor Advisory x_refsource_confirm
http://www.netfilter.org/security/2002-02-25-irc-dcc-mask.html
Various Sources vendor-advisory
x_refsource_hp
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0203-027
Various Sources vendor-advisory
x_refsource_mandrake
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:041
Mailing List mailing-list
x_refsource_vuln-dev
http://marc.info/?l=vuln-dev&m=101486352429653&w=2
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=101483396412051&w=2
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2002-028.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/8302
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/4188
Scores
EPSS
0.0489
EPSS Percentile
91.3%
Details
Status
published
Products (1)
linux/linux_kernel
< 2.4.18
Published
Mar 08, 2002
Tracked Since
Feb 18, 2026