CVE-2001-0405

ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall.

Affected products

Iptables, Red Hat

Linux Linux Kernel

= 2.4.0, 2.4.1, 2.4.2, 2.4.3

CVSS 2.0

7.5 HIGH

EPSS

10.3% (95th percentile)

NVD status

Modified

Published

2001-09-18