CVE-2002-0515

IPFilter < 3.4.25 - Filtered Port Detection via TTL Discrepancy

Title source: llm
STIX 2.1

Description

IPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is not being filtered, which allows remote attackers to identify filtered ports by comparing TTLs.

References (3)

Core 3
Core References
Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/265188
Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4403
Broken Link, Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/8738.php

Scores

EPSS 0.0220
EPSS Percentile 80.2%

Details

CWE
CWE-203
Status published
Products (1)
phildev/ipfilter < 3.4.25
Published Aug 12, 2002
Tracked Since Feb 18, 2026