CVE-2001-0851 Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.
MediumCVSS 5.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caldera openlinux server | = 3.1 | No fix listed |
| caldera openlinux workstation | = 3.1 | No fix listed |
| caldera openlinux | = 2.3 | No fix listed |
| caldera openlinux edesktop | = 2.4 | No fix listed |
| caldera openlinux eserver | = 2.3.1 | No fix listed |
| Linux kernel | = 2.0 | No fix listed |
| Linux kernel | = 2.2.0 | No fix listed |
| Linux kernel | = 2.4.0 | No fix listed |
| suse linux | = 6.3 | No fix listed |
| suse linux | = 6.4 | No fix listed |
| suse linux | = 7.0 | No fix listed |
| suse linux | = 7.1 | No fix listed |
| suse linux | = 7.2 | No fix listed |
| suse linux | = 7.3 | No fix listed |
References
- CLA-2001:432 vendor-advisory
- CSSA-2001-38.0 patch vendor-advisory
- MDKSA-2001:082 vendor-advisory
- ESA-20011106-01 patch vendor-advisory
- SuSE-SA:2001:039 vendor-advisory
- RHSA-2001:142 vendor-advisory
- linux-syncookie-bypass-filter(7461) vdb-entry