CVE-2001-0402

IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.44% chance of exploitation in the next 30 days, 83th percentile

Published

2001-09-18

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20730

References

• CVE Record
• NVD entry

Related

• CVE-2001-0401
• CVE-2001-0403
• CVE-2001-0400
• CVE-2001-0405
• CVE-2001-0399
• CVE-2001-0406